Hello. I am working on filing a case against an exchange that I had used to buy crypto through. The problem is that I was hit by a phishing attack. And this attack was enabled by a form that is publicly available on the exchange's website. The attacker just had to have knowledge of the victim's email address. When it was entered into that form, the victim would receive an email from that exchange. What's more, the email appeared to come from a particular person/employee of that exchange. And that name was used for a solid 24 hours. So the attacker just had to use the form and enter an email address that he/she had access to. Learn the name that was currently being used, and then go back to the form and enter their victim's email address. Then call the victim as that employee from that exchange and scare the hell out of the victim. So I am holding this exchange responsible for the damages that occurred due to this attack. They were aware of the problem with the form. They were the ones who told me about it, their legal team did. And after I pointed out what it did to me and how I am holding them responsible, they totally changed the form. It now doesn't ask for a ton of info and it validates the email address entered before sending out an email. And it doesn't apply a name, employee's name, to the email either. So what would I check off for the "nature of the suit"? Thanks in advance.