What best defines a data breach?

• A. A routine data backup
• B. An unauthorized access to a system
• C. An intentional or unintentional release of secure or confidential information to an untrusted environment
• D. A software licensing issue

Answer: (C)

Data breaches hinge on exposing confidential information to places or people outside the trusted environment. It happens when secure data is released to an untrusted environment, whether someone intends to do it or it occurs by mistake. This captures incidents like data being publicly exposed due to a misconfigured system, credentials stolen through phishing leading to data exfiltration, or a lost device containing unencrypted data. A routine data backup stays within normal operations and doesn’t involve leaking information to an untrusted party, while merely gaining unauthorized access to a system doesn’t necessarily mean data has been released outside. The essential idea is the actual release or exposure of secure information to an untrusted environment, which is why that option is the correct definition.