A data breach occurs when information is accessed, disclosed, altered, or stolen without authorization. The event may involve a company database, cloud account, device, paper record, or third-party supplier. Exposed data can include contact details, credentials, payment information, medical records, or Social Security numbers.
Data breach and data leak
The terms often overlap in public use. âBreachâ commonly emphasizes unauthorized access or disclosure. âLeakâ may include accidental exposure, poor configuration, or publication without a confirmed intrusion. The response should follow the information exposed rather than depend only on the label.
What to do after a notice
Verify the notice through the organizationâs official site. Identify the data types and date range. Change an exposed password and every reused copy, review account activity, and enable two-factor authentication.
Contact financial institutions for payment data. For an exposed Social Security number, review credit reports and place free freezes with Equifax, Experian, and TransUnion. Use IdentityTheft.gov when information has been misused.
What monitoring can do
Credential monitoring may identify registered email addresses and related credentials in known breach data. It cannot detect every incident or erase stolen copies. Credit and account alerts cover different records.