What is a Data Breach?
Data Breach is the term used to describe a security incident in which private, protected or confidential data is copied, transmitted, viewed, stolen, altered or accessed by an individual that is not authorized to access it. It is also known as unintentional information disclosure, information leakage or data spill.
Attackers often steal personal or confidential information because it has value. For example, they may use your full name, birthday, social security number, address or phone number to commit identity theft, credit card fraud or other financial crimes. Attackers may also steal passwords that can be used to gain unauthorized access to online accounts or services. For instance, a database containing the names, phone numbers and Facebook IDs of 419 million Facebook users was exposed in September 2019.
According to IBM’s Cost of a Data Breach 2022 report, attackers take advantage of flaws in software and other vulnerabilities to steal data. They can also exploit IT failures like temporary system outages to hack into sensitive databases. Attackers can also steal data from unsecured locations and devices, including mobile phones, laptops and office computers, or through physical skimming devices that collect payment card details.
Upon learning of a data breach, you should contact your banks and credit card providers to report the breach and request that they freeze or cancel your accounts. You should also monitor your bank accounts, credit card statements and online profiles for suspicious activity. In addition, you should change your passwords and consider using two-factor authentication for any online accounts tied to your credit cards or other valuable data.