What is a Data Breach?
The term Data Breach refers to when sensitive information that should be kept private is stolen and published on the Internet, usually by hackers. Attackers often use this data to make money by selling it on the Dark Web, or to cause harm to the affected individuals or organization. There are many technical root causes of breaches: misconfigured software, unpatched systems, and lack of encryption or password protection are common. In addition, attackers have a wide range of motives for stealing information including financial gain, espionage, political activism, and repression.
In a large breach in 2025, the nonprofit healthcare system Ascension exposed personal information ideal for medical identity theft. The breach was attributed to a vendor’s outdated security practices and highlights the need for organizations to exercise vigilance in assessing the security of their third-party providers.
In June 2025, a breach of China’s internal police and surveillance network resulted in the public exposure of over 4.0 billion records. The data included addresses, phone numbers, and other information that could be used for a variety of crimes. The leak also highlighted the need for stronger security measures by governments and organizations alike.
An attack on a government agency can leave sensitive and confidential information about military operations, national infrastructure details, and political dealings exposed to foreign intelligence agencies. Many states and countries require businesses to report any breaches that threaten individual privacy. Even in cases where the data is not directly used by criminals, people whose information is exposed will be at elevated risk for identity theft for years after the breach.