You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued.
