Evaluating cyber risk during the holiday season