“Framing emphasizes a security breach involving sensitive personal data, generating concern about privacy violations and institutional failure.”