There are several issues with the Sageworks article    Sageworks engages in the questionable practice of gathering protected business data and reselling it for a profit Given their tricky indemnity clause in the Terms of Use I sense that they know this and seek to shield themselves against potential legal attacks by irate business owners This needs to be stated in the article    The very sensitive data they resell is offered online They are thus a high value target for cybercriminals That needs to be stated to make the reader aware of the risks If Sageworks systems are broken into the attack will not be made public as they are a private company Unless there is a well publicized law suit unlikely in the private business space