What is a Data Breach?
Data Breach is when confidential, private or protected information is exposed to a person or entity who is not authorized to see it.
It can be accidental or intentional. Criminals may hack into your system by exploiting software vulnerabilities, social engineering or phishing attacks, or they can steal information from other sources such as compromised credentials and third party supply chain cyberattacks. They may then sell this information on the dark web. Data breaches put people at risk of identity theft and can cost them money and time fixing the problem. They can also harm a company’s reputation and destroy customer trust, often leading to a loss of future business opportunities.
Many states have laws requiring companies to notify people when their information has been breached. Notification laws differ from state to state and sometimes depend on whether the compromised data was encrypted or not.
While no organisation is immune to data breaches, certain types of data are more at risk than others. Personal information, such as names, addresses, email and phone numbers are a common target for cyberattackers. Sensitive financial information such as credit card or bank account details can also be targeted. And confidential information that could be used for espionage, such as military operations, national infrastructure details and political dealings, is particularly dangerous for government agencies.
Despite the increasing emphasis on data security, hackers are finding ways around cybersecurity measures. They can use ransomware, malware, third party supply chain attacks or a combination of these to gain access to valuable corporate data and credentials. They then use this stolen information to cause financial losses and damage an organisation’s reputation.