A Russian cracker stole thousands of credit card numbers from an online CD store, and posted them on his Web site after his blackmail attempts failed. This is probably what the company would refer to as a worst case scenario.