Alice, who owned a coffee shop, was informed by her payment card-processing bank of a potential data breach on her point-of-sale system. A forensics investigation found unintentionally stored credit card numbers. However, the payment card processor demanded indemnification for fines assessed by the credit card companies who alleged a data breach. The payment card processor withdrew $10,000 from the restaurant’s bank account and sued Alice’s restaurant for the balance of the $80,000.