What is a data breach?
Generally when we use the term “data breach” (also known as “information security breach,” “breach incident,” and “data security breach”), we are talking about an event that releases the personally identifiable information (PII) of an individual without that individual’s consent or knowledge. PII is usually defined as being composed of name, address, and some combination of the following: • Date of birth • National and state identification number (in the United States this means Social Security Number and drivers license number; in Canada this means Social Insurance Number and drivers license number) • Account numbers for credit card or debit cards • Passwords and codes • Biometric data (e.g., fingerprints) An unauthorized release of PII can happen in any number of ways, including the loss or theft of a laptop, improperly secured wireless networks, poor document retention and destruction policies, and unauthorized access or copying by a rogue employee.
