Data breach

A security incident in which protected or sensitive information is accessed, disclosed, or taken without authorization.

Phishing: A social-engineering attack that tricks people into revealing information or taking unsafe actions. Phishing often obtains credentials that attackers use to enter protected systems.
Identity theft: The fraudulent use of another person's identifying information, usually for financial or personal gain. Exposed identifiers can help criminals impersonate victims or open accounts in their names.
Personally identifiable information: Information that identifies a person directly or can be linked to them. Its exposure can enable impersonation, fraud, or unwanted disclosure of personal facts.
Equifax data breach: The 2017 exposure of personal information belonging to about 147 million people through an unpatched vulnerability at Equifax. The case showed how a known software flaw could expose highly sensitive records at scale.
Data leak: An unintended exposure of information, often through public access or accidental disclosure. A leak may expose data without an attacker deliberately accessing or stealing it.
Credential stuffing: An attack that tests stolen username-password pairs across other services. Reused passwords let attackers reach accounts without exploiting the breached service itself.
Data breach notification laws: Laws requiring organizations to notify affected people or authorities after certain breaches. Disclosure obligations depend on the data, jurisdiction, and circumstances of exposure.
Protected health information: Individually identifiable health information protected under applicable privacy rules. Health records carry specific confidentiality duties and can reveal especially sensitive details.
Yahoo data breaches: Intrusions disclosed in 2016 that affected billions of Yahoo user accounts over several years. The incidents became notable for their scale and delayed public disclosure.
Data loss: The destruction, corruption, or unavailability of data, whether accidental or intentional. Lost data may never have been accessed or disclosed by an unauthorized party.

Linked from 22 pages