How a breach can happen

A stolen support account, a publicly accessible storage folder, or an email sent to the wrong person can expose customer data. A breach can also mean information was changed or destroyed. It may be caused by an attack or a mistake.

Teams first stop further harm, save evidence, and find out which information and people were affected. Audit logs can help trace what happened.

What happens next

Depending on the breach, a team may reset passwords, fix access, restore data, and notify affected people or authorities. Reporting duties vary by law and circumstances, so teams should check them promptly and work from confirmed facts.