Hacking or IT incidents, unauthorized access, theft of equipment or paper records, loss of equipment or records containing sensitive information, and improper data disposal.