Server breaches - somebody gets in through the admin panel, a moderator account or a plugin, and the chain plays out over several days instead of resolving in one click

Ransom demands - they take a copy of the player database and name a price, scaled to how many records you hold and how much you have earned this season

Public leaks - miss the deadline and the database goes up on a board: reputation falls hard, toxicity spikes and some players never come back

Firewall - refuses outside requests to the panel and to plugins

Staff MFA - a stolen moderator password stops being enough on its own

Encrypted records - a stolen copy is noise, and it lets you publish the whole thing yourself and come out ahead