A data breach is an incident in which personal or confidential data is accessed, disclosed, altered or lost without authorisation. The breach itself is often only the first phase, as stolen emails, credentials and records feed targeted phishing campaigns, and fake breach notifications have become an attack pattern of their own.
