“The phrasing emphasizes repeated security failures involving sensitive personal data, creating a sense of urgent institutional incompetence.”