Odd question perhaps, but what would happen if you were hacked and that collection was stolen? Would it be considered distribution of CP? Would the legal ramifications for your organization be different from any other kind of data breach?