Kensington Trust experiences a cyber attack that compromises client data for 50,000 accounts and disrupts online banking for 3 days. The direct costs include $12 million in IT remediation, $8 million in regulatory fines, $5 million in client compensation, and an estimated $20 million in reputational damage. Under the Basel operational risk event type taxonomy, this loss would most likely be categorized as: