Classical economic theory would state that a person who would steal information, like your credit or debit card numbers, or name, phone number and address would be incentivised to do so because it creates a buyers market. With the stolen information, there would then drive up the demand to buy the information for all sorts of reasons which could be the reason someone would cause a cyber security attack. If the expenditure became lucrative then you would effectively create a new market increasing demand to commit cyber crime. A second economic theory could be a Marxian theory about how companies with power use their power to collect information when you need to use their services. This would invite people to try and steal the data because there would be a lot of it all in one place. A social theory to explain the letter would be a phishing attack. Someone may have socially engineered an attack to gain access when they otherwise would not have. This could have been the cause and reason for the malware that led to the data breach. The other social theory to explain this letter would be tailgating. There is a chance that someone tailgated their way into a facility they were not permitted to be in. This is another form of social engineering that would lead to a data breach like this one.