Factors influencing this decision include:

• Operational downtime costs
• Potential exposure of sensitive data
• risk of legal action and class-action lawsuits
• Reputational damage
• Concerns about funding criminal or sanctioned organizations