Top 10 GDP at time of attack. Must be by a state or entity with noteworthy international suspicion to be under direction of that state.

Mass = affects greater than 10,000,000 people

Civilian = non military personnel of another nation.

Private Data = passwords, private pictures, account numbers, some other form of data that is somewhat damaging (think embarrassing as lower bound). May include some false information purposefully or accidentally, but must be “mostly” reliable.

Exposing = making publicly accessible for the purpose of causing harm/chaos/unrest. Don’t read too much into this, basically suspected malicious intent.