An incident includes (but is not limited to): theft or unintentional disclosure of intellectual property, customer data, or other secrets, or major loss of resources (e.g. financial). It must be reported by the company or a reputable news source. It does not include pentests or bug bounty submissions that do not publicly disclose intellectual property or customer data.

This is date bound from the creation of the market (03/25/2024) through the end of 2024.