Market resolution criteria 2. “ Unauthorized access to sensitive user information affecting 10,000 or more accounts”