A data breach is unauthorized access to confidential data. The attacker copies it, sells it, or holds it for ransom. Sometimes the breach is discovered in minutes. Sometimes it takes months. The 2013 Target breach exposed 40 million card numbers. The 2017 Equifax breach exposed personal data on 147 million people. Both companies had security teams. Both missed the signs until it was too late.

Breaches happen through many paths. Stolen credentials, unpatched software, misconfigured cloud storage, malicious insiders, and supply chain compromise all lead to the same outcome. The data leaves. The organization finds out later. Response matters as much as prevention. A fast, organized response limits damage and preserves trust. A slow, confused response makes everything worse. Equifax's handling of its breach drew congressional scrutiny for months. Notification laws require organizations to tell affected individuals, often within a set timeframe. The reputational damage can outlast the technical recovery. Customers remember. Regulators remember. The breach becomes part of the company's history.

Common breach causes

• Stolen or weak credentials
• Unpatched vulnerabilities
• Misconfigured cloud storage
• Insider theft or negligence
• Third-party vendor compromise

Assume your data will be targeted. Encrypt it, limit access, and monitor who touches it. The breach you prevent is cheaper than the one you respond to.