Han is the Chief Financial Officer of Sporty Supplies Ltd. Last year, the board of directors were all instructed to download anti-virus software immediately onto all of their devices by the Information Technology department. Han downloaded the software onto his laptop but decided not to download the software onto his home personal computer. As Han was mainly working from home he used his personal computer for most company work. The board has recently discovered the personal information of all of Sporty Supplies Ltd customers was leaked from Han's home personal computer. Which one of the following is correct?

	a.	To avoid reputational damage the Board should hide any evidence of the leak and hope their customers do not find out.
	b.	Han is likely to have breached his duties of due care and diligence as a director by failing to download the anti-virus software.
	c.	To reduce reputational damage the Board should release a false statement saying that only a very small number of customers' personal information was leaked.
	d.	If the cost of informing customers their private information was leaked is excessively high, the company is exempt from informing customers and should try to keep the leak private.