Intelligence
What is Data breach?
An incident where data is accessed or taken by someone not authorised to have it, such as customer records leaked from a hacked database.
A data breach is any incident in which data is accessed, copied or disclosed without authorisation: a hacked database, a misconfigured cloud bucket, a stolen laptop or an insider leak. Many jurisdictions require breaches involving personal data to be reported to regulators and the people affected.
For CTI teams, breaches matter twice. Your own breaches need investigation, and other organisations' breaches produce leaked credentials and data that attackers reuse against you.