“Reports a security breach and corporate accountability issue, invoking concern about data safety without implying immediate physical harm.”