Would it also be covered if they didn't fix their infrastructure after they knew it had problems and someone external stole 6500 tax returns? It should.