What Is a Data Breach?

A data breach is an incident where sensitive information is exposed, stolen, or accessed by people who should not have it. The data might include passwords, email addresses, financial information, health details, or internal company records.

How Breaches Happen

There is no single cause. Some breaches come from hacking, some from phishing, some from weak passwords, some from software flaws, and some from simple mistakes like misconfigured databases.

The common thread is unauthorized exposure, not one specific attack method.

Why a Breach Matters Even if You Did Nothing Wrong

A breach is often about an organization’s security, not the individual user’s mistake. But users still deal with the consequences. Exposed data can lead to account takeovers, spam, phishing, fraud, and long-term privacy risks.

That is why breach notices matter even when they feel routine.

What To Do After a Breach Notice

Change the affected password immediately, and if you reused it anywhere else, change it there too. Turn on two-factor authentication where available. Watch for suspicious messages that use the breach as bait.

Summary

A data breach is unauthorized exposure or theft of sensitive information. Even if the breach happens at a company, users still need to respond carefully by changing passwords and tightening account security. For related protection steps, see What Is a Password Manager? and What Is Two-Factor Authentication?.