What is a Data Breach?
Data Breach occurs when confidential, private, protected, or sensitive information is exposed to a person who is not authorized to access it. This can be an accident caused by a misconfigured web server or application, lack of encryption when transmitting data over the Internet, physical theft of a device (like a laptop or mobile phone), or a cyberattack against a company.
Many attacks are motivated by financial gain, such as stealing credit card numbers and other banking details to drain money from individuals or businesses. Others are the result of malicious insiders, who can include disgruntled or laid-off employees and greedy staff seeking to profit from their employer’s misfortune or lone attackers operating as part of an organized crime ring.
Attackers have more ways to access data today than ever before. The rapid expansion of digital technology powered by data collection has likely contributed to this increase, along with a larger volume of that collected data. With more data being collected and more of it being stored in less secure ways, there are simply more chances for unauthorized access.
Once a breach is detected, organizations must rapidly identify affected individuals and inform them as required by law. Notification requirements vary by jurisdiction and may involve direct communication or the public disclosure of the breach. Proactive cybersecurity measures that include continuous monitoring, encryption, and strong authentication help reduce the risk of breaches and support compliance with notification obligations. However, even the best defenses can be breached by sophisticated and well-funded attack vectors.