What constitutes a data breach?

• A. Unauthorized access leading to loss of data integrity
• B. Accessing public data without permission
• C. Unauthorized reading or copying of sensitive data
• D. Observing network traffic without consent

Answer: (C)

A data breach is defined as a security incident where unauthorized individuals gain access to sensitive, protected, or confidential data, potentially causing harm to individuals or organizations. The correct answer highlights this fundamental aspect, emphasizing unauthorized reading or copying of sensitive data. In a breach, the core issue is that sensitive information is accessed without permission, which can lead to identity theft, financial loss, or other negative consequences.

Other scenarios provided, while they involve security concerns, do not fully align with the definition of a data breach. Unauthorized access leading to loss of data integrity might indicate a security incident but lacks the direct component of sensitive data exposure. Accessing public data without permission does not constitute a breach since the data is meant to be accessible by the public. Observing network traffic without consent, while potentially unlawful, does not necessarily imply that sensitive data has been accessed or compromised. These distinctions are vital in understanding what characterizes a data breach in the context of cybersecurity.