The first mistake can be attributed to Mr. Steinhafel releasing a number of affected customers that was much higher than what may have actually been the case. An argument can be made that releasing the highest possible number was a decision that carried more integrity, but a counterargument can be made that providing misinformation, that will most likely alarm the public, is bad for the organization.