Module 3 challenge — Question 8

An organization that processes private health information is found to be in violation of HIPAA. The incident is publicized, and the organization loses customers. What type of risk is this scenario an example of?