Courts and government agencies are constantly evolving their approach to cybercrime and data breach issues. The Federal Trade Commission has taken the lead for the federal government as the enforcement agency for data breach and cybercrime incidents. A 2015 decision from the U.S. Court of Appeals for the Third Circuit affirmed the FTC's authority to regulate cybersecurity under its authority to regulate "unfair or deceptive acts or practices in or affecting commerce." The case involved the Wyndham Hotels and Reports where hackers had successfully accessed Wyndham's computer systems and stolen personal and financial information of consumers leading to over $10 million in fraudulent credit card charges. The court concluded that the FTC has a broad mandate to hold businesses accountable for not adhering to cybersecurity practices that unreasonably expose personal data to unauthorized access and theft.