If customer information is stolen from your database, it may put your customers at risk, so could they hold you personally liable? Does your Insurer require you to have multi-factor authentication or disclose known risks, such as security vulnerabilities in older software?