{"id":103076,"date":"2025-02-01T13:02:43","date_gmt":"2025-02-01T05:02:43","guid":{"rendered":"https:\/\/version-2.com.sg\/?p=102902"},"modified":"2025-02-01T13:02:43","modified_gmt":"2025-02-01T05:02:43","slug":"what-is-a-data-breach-and-how-does-it-happen","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2025\/02\/what-is-a-data-breach-and-how-does-it-happen\/","title":{"rendered":"What is a data breach, and how does it happen?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"103076\" class=\"elementor elementor-103076\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-71ae5294 post-content elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"71ae5294\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c4a899f&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1e9119cd\" data-id=\"1e9119cd\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4f04f8cb elementor-widget elementor-widget-text-editor\" data-id=\"4f04f8cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"Paper_lightPrimary__mYiVF\" data-testid=\"paper\" data-theme=\"light\"><div class=\"WidgetContainer_root__95_nq WidgetContainer_topPadding0__A_wfE WidgetContainer_bottomPadding72__GyM8V\"><img decoding=\"async\" class=\"ArticleHeroImage_image__kKevZ\" src=\"https:\/\/content.nordstellar.com\/uploads\/blog_data_breach_2c59ee7c88.webp\" sizes=\"(min-width: 1000px) 1000px, (min-width: 750px) 750px, (min-width: 500px) 500px, 100vw\" srcset=\"https:\/\/content.nordstellar.com\/uploads\/large_blog_data_breach_2c59ee7c88.webp 1000w, https:\/\/content.nordstellar.com\/uploads\/small_blog_data_breach_2c59ee7c88.webp 500w, https:\/\/content.nordstellar.com\/uploads\/medium_blog_data_breach_2c59ee7c88.webp 750w\" alt=\"What is a data breach, and how does it happen?\" \/><\/div><\/div><div id=\"section-1\"><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Data breaches are one of the most common cybersecurity threats that businesses and individuals have to face. What may seem like a small data leak can result in huge financial loss and reputational damage. So, what is a data breach, how does it happen, and how can you safeguard your data?<\/p><h2 id=\"what-is-a-data-breach\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What is a data breach?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">A data breach occurs when unauthorized people gain access to personal, classified, or otherwise protected information. Data breaches can be unintentional (for example, resulting from a company file sent to the wrong person) or malicious (caused by phishing emails, hacker attacks, or malware infections).<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">More often than not, businesses and individuals suffer malicious data breaches. Since data can hold significant value, it\u2019s natural that cybercriminals try to steal it and make a profit from it either by selling the obtained information on the dark web or ransoming it for huge sums.<\/p><h2 id=\"how-do-data-breaches-happen\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">How do data breaches happen?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Typical data breaches involve specific steps, such as reconnaissance, gaining access, extracting data, and covering the hackers\u2019 tracks. In certain cases, cybercriminals can also use privilege escalation or lateral movement.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Here\u2019s how malicious actors breach systems to steal data:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 1 \u2013 Reconnaissance.<\/strong>\u00a0Before launching an attack (be it phishing, malware,\u00a0<a class=\"Link_primary__AQMlQ Link_medium__XEV_Z Link_underline__6ODYx Link_noTextDecoration__GhdxD\" href=\"https:\/\/nordstellar.com\/blog\/what-is-session-hijacking\/\">session hijacking<\/a>, or brute force attacks), cybercriminals will scout the system for potential attack vectors and system vulnerabilities. Once they gather the information they need, the cyberattack is ready to go.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 2 \u2013 Gaining access.<\/strong>\u00a0This one is also known as the initial compromise. During this process, hackers use their preferred attack method to gain unauthorized access to the system and its data.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 3 \u2013 Privilege escalation.<\/strong>\u00a0Once they breach the system, malicious hackers may need higher clearance, such as admin rights, to bypass restrictions and access more sensitive data. To do so, hackers exploit system vulnerabilities until they get admin-level access, which strengthens their control over the compromised system.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 4 \u2013 Lateral movement.<\/strong>\u00a0When hackers gain enough power over the system\u2019s controls, they can use them to move laterally across the network. That means malicious actors have open access to all or most system files, most significantly those that include sensitive information.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 5 \u2013 Data exfiltration.<\/strong>\u00a0Once the bad guys are completely set in the breached system, they begin exfiltrating the \u201cgood stuff.\u201d Using extraction tools, hackers steal personal information, business secrets, and classified documents in seconds, sometimes before system owners can even notice anything.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Step 6 \u2013 Covering tracks.<\/strong>\u00a0After completing their task, the hackers will try to cover up any trace of their presence. This usually means deleting activity logs or disabling security systems so that the system owners and security do not pick up any leftovers, unusual files, or suspicious activities.<\/div><\/li><\/ul><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The steps above describe a perfect data breach, during which the system operators are unaware of being attacked. Depending on the type of attack, the system security, or the vigilance of its owners, data breaches can be spotted early or even during the attack, forcing malicious actors to adjust their methods.<\/p><h2 id=\"what-are-the-main-causes-of-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What are the main causes of data breaches?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Poor cybersecurity practices, such as weak passwords or unpatched vulnerabilities, are usually the main causes of data breaches. Cybersecurity experts also note that human error is among the most common causes of this issue and add misconfigured systems and physical credential theft (or loss) to the list of contributing factors.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Hackers target both small and large businesses for two different reasons. Small businesses often lack robust cybersecurity practices, making them easy targets. Meanwhile, large companies often present a challenge that can motivate hackers to breach the system and humiliate the company publicly, resulting in financial and reputational damage. Some hackers may also breach systems to commit espionage or even shine a light on a specific political or social cause (a process also known as hacktivism).<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Based on these simple principles, malicious actors can exploit different vulnerabilities. For example, small businesses often suffer phishing and other social engineering attacks. Big businesses aren\u2019t immune to phishing either, due to the larger number of employees and extensive communication channels. However, they\u2019re also more likely to experience brute force attacks, which can breach the company\u2019s cybersecurity and result in data theft.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Businesses may also face different\u00a0<a class=\"Link_primary__AQMlQ Link_medium__XEV_Z Link_underline__6ODYx Link_noTextDecoration__GhdxD\" href=\"https:\/\/nordstellar.com\/blog\/types-of-data-breaches\/\">types of data breaches<\/a>\u00a0caused by insider threats (employees who willingly help hackers get inside), malware, unpatched system vulnerabilities, or even lost or stolen company devices. This is why companies invest in cybersecurity measures, such as password managers, two-factor authorization (2FA), and skilled cybersecurity personnel. However, it\u2019s equally important to train all employees to help them understand their role in maintaining cybersecurity in the workplace.<\/p><h2 id=\"what-methods-are-used-in-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What methods are used in data breaches?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">As mentioned, hackers can use numerous methods to breach the systems and steal data. From malware to third-party software, here are the main ways in which malicious actors may launch a data breach attack:<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Malware<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Hackers use malware to slip into the system undetected. Files with spyware or ransomware, trojans, and infostealers are among the most common types of malware that can open doors for hackers to access your system, potentially gain admin-level privileges, and steal sensitive data.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Malware can infect your system through various methods, including phishing links, infected USBs, and unsafe websites. Therefore, employee vigilance is essential in preventing this type of cyberthreat.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Social engineering<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Social engineering refers to attacks that involve direct contact between the hacker and the system user. Malicious actors create believable scenarios and try to lure users into providing sensitive information, using methods such as phishing.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Whaling is another great example of a social engineering attack. This method is used to target big companies and works similarly to phishing. During whaling attacks, hackers send emails to high-level employees (executives, CEOs, and CFOs), pretending to be representatives of reputable companies, such as law firms. In those emails, the hackers may urge their victims to wire money, share the company\u2019s secrets, click on suspicious links, or download unknown files.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Phishing<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Phishing is a social engineering cyberattack that exploits users by baiting them to click on links or files that contain viruses, spyware, and other malware. Hackers usually attempt phishing through email and contact employees with messages that create a sense of fear or urgency and encourage quick response. For example, phishers may target employees by pretending to be representatives of legitimate organizations, and prompting the users to take immediate action based on the content of the email.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">If an employee takes the bait, they may click on the link which typically hosts some kind of malware, potentially opening the doors for cybercriminals to breach the system. The landing pages of some phishing links may also replicate known user interfaces, such as system login windows, and scan everything the user types (including username and password), further exposing the system to the threat.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Human error<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">No matter how hard people try, sometimes accidents happen. A lost keycard, a typo in the email address field, or a lost work laptop can cause a data breach if they fall into the hands of malicious actors. If something like that happens, it\u2019s important to report the issue without ignoring it and be vigilant of potential breaches or attacks. Offering support to the person who made a mistake is also a good practice for maintaining loyalty among employees.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Insider threats<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">In some cases, hackers can initiate a data breach with assistance from someone inside the organization. According to the experts, this issue has become so prevalent that it now ranks among the top cybersecurity risks for large businesses. To prevent insider threats, you can limit access to sensitive information or invest in a better workplace environment (people are less likely to turn against the company when they actually like working there, right?).<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Supply chain attacks<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Supply chain attacks occur when hackers target part of a company&#8217;s supply chain software. In simple terms, it\u2019s a type of cyberattack that targets service providers, vendors, and third-party apps on which the company relies. Some businesses may need to share access rights or sensitive information when using third-party services. Therefore, a successful supply chain attack can expose your company\u2019s system even if it wasn\u2019t attacked directly.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Unpatched vulnerabilities<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">As soon as companies develop new strategies to safeguard their data, malicious actors come up with new ways to overcome them. System security gets obsolete fast, exposing businesses to cyberattacks. Overdue updates and unpatched vulnerabilities invite hackers to breach your networks and steal sensitive data. To avoid such problems, companies should install system updates as soon as they launch while constantly monitoring and patching additional system vulnerabilities.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Weak or stolen credentials<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Weak passwords are one of the most common causes of data breaches. Far too often, people believe their passwords are strong enough, while a hacker with a capable toolset can crack them in mere seconds. Safeguarding against this vulnerability requires businesses to introduce 2FA and educate employees on password security. Using additional tools such as password managers can also be a huge benefit.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Cloud misconfigurations<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">While cloud storage is a convenient choice for data storage, poorly configured cloud servers can turn that comfort into a headache in just a few seconds. Insufficient user restrictions, lack of encryption, or disabled logging and monitoring can allow malicious actors to jump into your cloud server and peek at all the sensitive data you might be hiding there.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Third-party access<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Third-party access vulnerabilities can allow cybercriminals to steal your business data even without directly attacking your company. Hackers may target a third-party service provider to hijack communications, gain access to specific files shared between your company and the third-party service provider, or learn about potential vulnerabilities.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Safeguarding against this risk is difficult but not impossible. Before entrusting your company\u2019s data to a third-party service provider, make sure that the provider has an impeccable cybersecurity record. Even then, set up separate accounts for communication and use proper information segmentation. In addition, look for ways to safeguard your system in case of a third-party attack.<\/p><h2 id=\"what-are-the-targets-of-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What are the targets of data breaches?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Data breaches, as the name suggests, mainly target data. Depending on the service the business provides, we can divide that data into more specific types.<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Personal data.<\/strong>\u00a0Includes names, surnames, addresses, phone numbers, Social Security numbers, and birth dates. Malicious actors may use stolen personal data to commit identity theft or sell it on the dark web.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Financial data.<\/strong>\u00a0This data type includes credit card numbers, bank account details, and payment information. With this data, hackers can try to carry out fraudulent transactions or drain bank accounts.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Login credentials.<\/strong>\u00a0If the system collects usernames, passwords, or answers to security questions, the data breach will expose them to malicious actors. Needless to say, login credential leaks can pose a huge risk of identity theft and loss of account access (for example, when hackers use the victim\u2019s login details to change the account\u2019s password).<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Intellectual property.<\/strong>\u00a0Patents, trade secrets, and research data can harm businesses and cause significant financial damage when in the hands of hackers. Malicious actors may demand ransom for stolen data or try to sell it on the dark web, making a company\u2019s hard work go to waste.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Customer and client data.<\/strong>\u00a0Businesses often collect various types of customer data including, but not limited to, personal and financial information. Suffering a data breach that leaks client data is a huge financial, reputational, and potentially legal blow. Customer data is often the most sought-after target for malicious actors because it causes the most damage, hurting the business and creating thousands of potential new victims.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Government data.<\/strong>\u00a0Some companies may work closely with the government as service contractors. That could mean exchanging sensitive information such as strategic documents, personal data of government employees, or even classified information. Exposing such data to hackers could, at the very least, cause a scandal, let alone destroy careers, or even worse \u2014 put someone\u2019s life in danger.<\/div><\/li><\/ul><\/div><p>\u00a0<\/p><h2 id=\"what-are-the-consequences-of-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What are the consequences of data breaches?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The consequences of data breaches vary depending on the type and amount of stolen data, the size and reputation of the company, and sometimes even the hacker&#8217;s \u201cgoodwill.\u201d Based on these (and many more) factors, the consequences of a data breach can range from small financial losses to massive reputational damage, compliance regulation breaches, lawsuits, loss of certificates, and even official government hearings.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Typically, after stealing sensitive data, malicious hackers can either use it to further their scams (for example, using stolen client data to launch phishing attacks and steal identities), sell the data on the dark web, or contact the owners of the breached system to demand ransom for the stolen data. If the company has a strong presence in the market or is one of its leaders, the hackers may leak the data for free to cause reputational (and, therefore, financial) damage.<\/p><h2 id=\"reallife-examples-of-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Real-life examples of data breaches<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Examples of real-life data breaches prove that even well-known companies, such as Equifax and Yahoo, cannot feel safe from potential cyberattacks. Here are a few high-profile data breach cases:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">MGM resorts data breach (2023).<\/strong>\u00a0In early 2023, MGM Resorts suffered a major data breach after a cyberattack that appeared to target its internal systems, causing severe disruptions. A result of a ransomware attack, the breach granted hackers access to sensitive information, including guest data and internal systems. The breach resulted in complete system shutdown along with reputational damage and significant financial loss.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Snowflake data breach (2023).<\/strong>\u00a0Snowflake, a business cloud data platform, suffered a data breach when hackers found a possible entry point through a third-party provider. The supply-chain attack exposed sensitive data stored on Snowflake&#8217;s platform, including financial information and business intelligence. This caused a series of security incidents including breaches at other Snowflake-associated companies (such as AT&amp;T and Santander Bank). While the company took swift action and worked with security experts to address vulnerabilities, the snowball of breaches that rolled over Snowflake\u2019s customers resulted in a significant reputational damage.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">MOVEit Transfer data breach (2023).<\/strong>\u00a0Progress Software&#8217;s MOVEit Transfer, a secure file transfer software, was exploited by a zero-day vulnerability, just last year. The breach affected thousands of organizations worldwide, with hackers gaining access to personal, financial, and healthcare information. The company sustained increased scrutiny and hefty financial consequences.<\/div><\/li><\/ul><h2 id=\"how-can-businesses-prevent-data-breaches\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">How can businesses prevent data breaches?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">For businesses, data breach prevention requires substantial financial and human resources. Here are some tips on how to safeguard your business against data breaches:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Implement two-factor authentication.<\/strong>\u00a0Safeguarding systems with 2FA provides an additional layer of security and helps detect suspicious or unauthorized access requests more quickly.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Encrypt sensitive data.<\/strong>\u00a0Investing resources in strong encryption can improve your business cybersecurity and increase the safety of sensitive information. While you can use file encryption tools, a VPN such as NordVPN can offer additional benefits (for example, Threat Protection Pro\u2122 features).<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Build a strong cybersecurity team.<\/strong>\u00a0Large companies should invest in seasoned cybersecurity specialists. They will help you better prepare for potential cyber threats and strengthen the overall safety of the company\u2019s sensitive data (for example, through educating your employees).<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Update and patch software regularly.<\/strong>\u00a0System updates often include new security patches, so it\u2019s crucial to install them as soon as possible to keep your systems up to date.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Carry out security audits and employee training.<\/strong>\u00a0As the old saying goes, \u201cpractice makes perfect.\u201d Run regular security audits and employee training sessions to strengthen the company\u2019s cybersecurity and ability to respond to a potential data breach.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Create backups and data recovery plans.<\/strong>\u00a0Data diversification can be a smart strategy. Make sure to create backups for sensitive information and draw up strategies to recover lost data. While this may not protect against a potential data breach, it\u2019ll help mitigate the damage (for example, by avoiding paying a ransom) after a potential cyberattack.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Use NordStellar.<\/strong>\u00a0From the minds behind NordVPN, the latest addition to the Nord family, NordStellar helps businesses identify potential exposures and compromised customer or employee credentials before hackers can take action. It\u2019s a useful tool that aids businesses in\u00a0<a class=\"Link_primary__AQMlQ Link_medium__XEV_Z Link_underline__6ODYx Link_noTextDecoration__GhdxD\" href=\"https:\/\/nordstellar.com\/data-breach-monitoring\/\">data breach monitoring<\/a>, identifying potential risks, and tracking mentions of your company in cybercrime communities.<\/div><\/li><\/ul><h2 id=\"what-to-do-if-your-business-suffers-a-data-breach\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What to do if your business suffers a data breach<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">If the business has suffered a data breach, it\u2019s critical to act fast. First, contain the breach by isolating all affected systems and assessing the damage and the compromised data. Then, start patching vulnerabilities, fixing security gaps, and notifying affected customers and stakeholders. Some laws may also require reporting the data breach to law enforcement (for example, under the GDPR, organizations have 72 hours to report a breach to the relevant data protection authority).<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Finally, continue to monitor your systems and review the security policies. The backlash and repercussions may continue for some time. However, while going through the process, it\u2019s important to start upgrading and patching your cybersecurity weaknesses to avoid future cyberattacks.<\/p><p>\u00a0<\/p><h2 id=\"faq\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">FAQ<\/h2><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What is the average cost of a data breach?<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">While it\u2019s hard to define a specific figure, the average cost of a data breach usually involves millions of dollars. Some experts indicate that the average cost per lost or stolen record containing sensitive information could be approximately $165, while healthcare records may reach $429 per record. According to IBM&#8217;s 2023 Cost of a Data Breach report, the average data breach exposes about 25,000 records. Based on these numbers an average data breach can cost from $4 million to $10 million and more.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">How to detect a data breach?<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">To detect a data breach, check your system activity logs and file directories for suspicious activity. Data breaches usually include connections from unknown devices, changes in file locations or sizes, and unusual data transfers. So if you notice any unauthorized or dubious changes in your system, start investigating. Additionally, use automated security tools, such as\u00a0<a class=\"Link_primary__AQMlQ Link_medium__XEV_Z Link_underline__6ODYx Link_noTextDecoration__GhdxD\" href=\"https:\/\/nordstellar.com\/\">NordStellar<\/a>, and regularly conduct security audits to enhance threat detection capabilities.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh Heading_uppercase__p71eb SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">How should business report a data breach?<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Reporting a data breach may look different depending on where the business operates. For example, in the EU, you must report a breach to your local data protection authority (DPA) within 72 hours of its discovery. In the US, however, most states obligate businesses to notify their Attorney General&#8217;s office or consumer protection agencies of any breaches. The requirements vary by state, and the timelines may be shorter than those mandated by federal law.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">It&#8217;s also critical to inform the company&#8217;s customers by sending emails or text messages describing the situation and the steps that will be followed to mitigate the damage.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a1b0f4 elementor-widget elementor-widget-shortcode\" data-id=\"1a1b0f4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"page\" data-elementor-id=\"103071\" class=\"elementor elementor-103071\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6ba5c224 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"6ba5c224\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2e4bca01\" data-id=\"2e4bca01\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7d983173 elementor-widget elementor-widget-image-box\" data-id=\"7d983173\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">About NordStellar<\/h3><p class=\"elementor-image-box-description\">NordStellar is a threat exposure management platform that enables enterprises to detect and respond to network threats before they escalate. As a platform and API provider, NordStellar can provide insight into threat actors\u2019 activities and their handling of compromised data. Designed by Nord Security, the company renowned for its globally acclaimed digital privacy tool NordVPN.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\n\t\t<div data-elementor-type=\"page\" data-elementor-id=\"18103\" class=\"elementor elementor-18103\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-748947f elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"748947f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7995c19\" data-id=\"7995c19\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a437045 elementor-widget elementor-widget-image-box\" data-id=\"a437045\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">About Version 2 Digital<\/h3><p class=\"elementor-image-box-description\">Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.\n<br><br>\nThrough an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Data breaches are one of the most common cybersecurity  [&hellip;]<\/p>\n","protected":false},"author":149011791,"featured_media":102433,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":true},"categories":[1305,1306,61],"tags":[1077,1307],"class_list":["post-103076","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-1305","category-nordstellar","category-press-release","tag-1077","tag-nordstellar"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What is a data breach, and how does it happen? - Version 2<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is a data breach, and how does it happen? - Version 2\" \/>\n<meta property=\"og:description\" content=\"Data breaches are one of the most common cybersecurity [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/\" \/>\n<meta property=\"og:site_name\" content=\"Version 2\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-01T05:02:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/blog-v2-logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"250\" \/>\n\t<meta property=\"og:image:height\" content=\"70\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"ericav2\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ericav2\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2025\\\/02\\\/what-is-a-data-breach-and-how-does-it-happen\\\/\"},\"author\":{\"name\":\"ericav2\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/47b5538f057952e0f25c791e955659e7\"},\"headline\":\"What is a data breach, and how does it happen?\",\"datePublished\":\"2025-02-01T05:02:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2025\\\/02\\\/what-is-a-data-breach-and-how-does-it-happen\\\/\"},\"wordCount\":3094,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"2025\",\"Nordstellar\"],\"articleSection\":[\"2025\",\"Nordstellar\",\"Press Release\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2025\\\/02\\\/what-is-a-data-breach-and-how-does-it-happen\\\/\",\"url\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/\",\"name\":\"What is a data breach, and how does it happen? - Version 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2025-02-01T05:02:43+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nordstellar.com\\\/blog\\\/what-is-a-data-breach\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/version-2.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is a data breach, and how does it happen?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"name\":\"Version 2\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/version-2.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\",\"name\":\"Version 2\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"width\":1795,\"height\":335,\"caption\":\"Version 2\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/47b5538f057952e0f25c791e955659e7\",\"name\":\"ericav2\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g\",\"caption\":\"ericav2\"},\"url\":\"https:\\\/\\\/version-2.com\\\/en\\\/author\\\/v2erica\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is a data breach, and how does it happen? - Version 2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/","og_locale":"en_US","og_type":"article","og_title":"What is a data breach, and how does it happen? - Version 2","og_description":"Data breaches are one of the most common cybersecurity [&hellip;]","og_url":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/","og_site_name":"Version 2","article_published_time":"2025-02-01T05:02:43+00:00","og_image":[{"width":250,"height":70,"url":"https:\/\/version-2.com\/wp-content\/uploads\/2020\/04\/blog-v2-logo.jpg","type":"image\/jpeg"}],"author":"ericav2","twitter_card":"summary_large_image","twitter_misc":{"Written by":"ericav2","Est. reading time":"15 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#article","isPartOf":{"@id":"https:\/\/version-2.com\/2025\/02\/what-is-a-data-breach-and-how-does-it-happen\/"},"author":{"name":"ericav2","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/47b5538f057952e0f25c791e955659e7"},"headline":"What is a data breach, and how does it happen?","datePublished":"2025-02-01T05:02:43+00:00","mainEntityOfPage":{"@id":"https:\/\/version-2.com\/2025\/02\/what-is-a-data-breach-and-how-does-it-happen\/"},"wordCount":3094,"commentCount":0,"publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"image":{"@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#primaryimage"},"thumbnailUrl":"","keywords":["2025","Nordstellar"],"articleSection":["2025","Nordstellar","Press Release"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/version-2.com\/2025\/02\/what-is-a-data-breach-and-how-does-it-happen\/","url":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/","name":"What is a data breach, and how does it happen? - Version 2","isPartOf":{"@id":"https:\/\/version-2.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#primaryimage"},"image":{"@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#primaryimage"},"thumbnailUrl":"","datePublished":"2025-02-01T05:02:43+00:00","breadcrumb":{"@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/nordstellar.com\/blog\/what-is-a-data-breach\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/version-2.com\/"},{"@type":"ListItem","position":2,"name":"What is a data breach, and how does it happen?"}]},{"@type":"WebSite","@id":"https:\/\/version-2.com\/zh\/#website","url":"https:\/\/version-2.com\/zh\/","name":"Version 2","description":"","publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/version-2.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/version-2.com\/zh\/#organization","name":"Version 2","url":"https:\/\/version-2.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","contentUrl":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","width":1795,"height":335,"caption":"Version 2"},"image":{"@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/47b5538f057952e0f25c791e955659e7","name":"ericav2","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/270ad369d68b5b4c46455393234c703648ceb9dd2bb6ad776e37d75bd0c5eb0c?s=96&d=identicon&r=g","caption":"ericav2"},"url":"https:\/\/version-2.com\/en\/author\/v2erica\/"}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbQRKm-qOw","jetpack_featured_media_url":"","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts\/103076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/users\/149011791"}],"replies":[{"embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/comments?post=103076"}],"version-history":[{"count":0,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/posts\/103076\/revisions"}],"wp:attachment":[{"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/media?parent=103076"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/categories?post=103076"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/version-2.com\/en\/wp-json\/wp\/v2\/tags?post=103076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}