Used to report and track the response to passwords being exposed to or accounts being accessed by someone other than the account holder.