“Sensitive information is any PII which, if it falls into the wrong hands, can cause significant, even catastrophic injury to the individual,” Mitchell noted. “For example, if a hacker gets the ...