A financial institution is assessing the risk associated with its online banking platform. The institution has identified three primary threats: unauthorized access, data breaches, and service outages. Each threat has been assigned a likelihood and impact score based on historical data and expert judgment. The likelihood of unauthorized access is rated as 4 (on a scale of 1 to 5), with an impact score of 5. Data breaches have a likelihood of 3 and an impact of 4, while service outages are rated with a likelihood of 2 and an impact of 3. To prioritize these risks, the institution uses a risk matrix that calculates risk as the product of likelihood and impact. Which threat should the institution prioritize based on the calculated risk scores?