The Existence of an Ethical Duty on the Part of Commerce

The existence of an ethical duty on the part of Commerce & Trade Company, and other businesses, to prevent an attack by hackers on business computer systems, and consequent theft of customers' and employees' personal data, is evidenced by

A) a business's offer of credit monitoring in the event of a breach.
B) a business's cyber security insurance.
C) the individuals' trust in the business to protect their data.
D) a business's stated "Privacy Policy."