You are working at eHarbour and learn that eHarbour's computer system has been attacked by a computer virus from a cybercriminal. An employee of eHarbour inadvertently opened an email with an attachment that appeared to come from the State of Florida Division of Corporations for business registration renewals. The names, addresses, phone numbers, credit card information, and other personal information of all eHarbour customers have been compromised in the data breach.

1. What is the reasonable prudent person standard for negligence in this scenario?

2. What are the potential damages in a negligence action in this scenario?

3. What are potential affirmative defenses in this scenario?