What is a Data Breach?
Data Breach is a security violation in which sensitive, protected or confidential information like personal data is copied, transmitted, viewed, stolen, altered or used by someone who has no authorized access to do so. It is also known as unintentional information disclosure, data leak, or info leak.
Human error is a common cause of data breaches. For instance, in 2011, an Apple employee carelessly left a laptop with prototypes of the next iPhone at a Bay Area bar. It was picked up by tech blog Gizmodo and posted photos and videos of the new gadget. Other causes include malware, brute force attacks and phishing emails.
A data breach can have a profound impact on an organization’s reputation and financial bottom line, as well as expose individuals to serious harm. The fallout can be long-lasting, and a company may become known for the incident rather than its products or services. Examples include Equifax, Target and Yahoo.
Attackers usually use targeted cyberattacks to steal high-value data. This information is usually sold for money on black market marketplaces or used to exploit victims. Other attacks include lateral movement and privilege escalation, where the attacker moves around an organization’s system to obtain more valuable data.
The most damaging impact is on the people whose personal data was exposed in a breach. If hackers get their hands on an individual’s banking details, medical records or Social Security number, they can do a lot of damage in a short time. For example, they can steal the person’s identity and open credit cards in their name, drain bank accounts, ruin their credit rating, or even take out loans in their name.