In the event of a dispute over third party's removal of protection measure for the Bank's information system or use of a loophole in information system, the Bank shall bear the burden of proof with regard to non-existence of such event.