The biggest risk is a data leak in the hands of a malicious actor, with confidential information being used for ransoms, reselling, or other illegal activities.