What counts as a systemic issue versus an isolated case?

We look at factors including the number of cardholders affected, whether transactions share a common vector such as a BIN range or merchant, transaction velocity, and total exposure. If a case shows signs of a common attack pattern rather than an isolated incident, we treat it as systemic.