Information privacy is an important information management issue that continues to challenge organizations. Previously, some privacy research focused on the problems resulting from the decisions organizations make about using or reusing personal information $($e$.$g$.,$ Greenaway and Chan $2005$; Smith $1993).$ Today, the decentralized technology environment contributes to a different organizational privacy problem: data breaches $($Culnan et al$.2008).$ Breaches present a fruitful area for organizational privacy research because the United States is currently alone in requiring formal notice in the event of a breach $($Schwartz $2009).$ The U$.$S$.$ breach laws have resulted in a rich body of public information about breaches that currently does not exist elsewhere since without