Security incident where sensitive, protected, or confidential data is accessed, stolen, or disclosed without authorisation.
A data breach occurs when sensitive information is accessed, copied, transmitted, or stolen by unauthorised parties. Breaches can result from external attacks (hacking, malware), insider threats, accidental disclosure, or physical theft. Data breaches have legal implications under GDPR (requiring notification within 72 hours), reputational consequences, and potential financial losses from fines, remediation, and lawsuits. The severity depends on data type—personal data, financial information, health records, and credentials carry highest impact.
Why It Matters
The DSC Perspective:
Data breaches trigger regulatory obligations, damage customer trust, and can result in significant fines. Prevention through security controls and preparation through incident response planning are both essential.