License privacy breaches could cost millions