What is a data breach?

A data breach is when private, confidential, or sensitive information is released into an unsecured area, whether it’s simply a mistake or a deliberate attack. Data breaches can affect millions of people and can range from a doctor looking at the wrong patient’s chart to hackers attempting to access government computers. Cybercriminals target everyone, but major corporations are a prime target because of the large amount of personal and financial data they hold, which can be sold on underground markets.

There are many ways a data breach can happen, such as lost or stolen credentials, lost or stolen equipment, social engineering attacks, insider threats, vulnerability exploits, malware infections, or lack of encryption. Some of the largest data breaches in history involve using multiple forms of attack, such as the 2013 Target data breach which involved a phishing scam, the hijacking of a third-party vendor, and a massive, coordinated attack on physical point-of-sale devices.

Preventing data breaches is difficult because no singular solution would protect against the many forms of breaches. However, businesses can take steps to minimize the risks, such as implementing strong passwords and multi-factor authentication, encrypting sensitive data, regularly updating software, and providing employee training on cybersecurity best practices.

Looking to learn more? We suggest heading over to Cloudflare’s Learning Center for an in-depth look at data breaches.