While a lot of the information risk to individuals centers on identity theft, who might want to gain access to your organization's data? And what might they want to do with it? (For the organizational context, consider if you worked for a bank, a retail business, or the US Government.)