Sorry there should have been an 'and/or' clause in there.

Reputational I was thinking leaking data, or generating wrong information for users etc