A supplier reports an intrusion while your team is negotiating a major customer contract. The same event may require a privacy assessment, a securities disclosure