A data breach is a security incident in which sensitive, confidential, or protected information is accessed, exposed, or stolen by someone without authorisation. That might be passwords, card numbers, emails, or health records — and once leaked, they fuel fraud, identity theft , and account takeover. Here’s how breaches happen, what to do if you’re caught in one, and how to limit the damage in advance.
Reviewed and kept current by the Coppers.io editorial team — see how we research .
What a data breach is
A data breach is any incident where information ends up in the wrong hands — whether stolen by attackers, leaked by mistake, or exposed through a misconfigured system. The data can come from a company you use, an app, or your own device. Because so much of life is online, breaches are now routine , which is why knowing how to respond matters.
How data breaches happen
The common causes:
- Phishing and stolen credentials — attackers trick or buy their way in.
- Malware and ransomware — including data theft before encryption.
- Exploited vulnerabilities — unpatched software or web flaws.
- Weak or reused passwords — enabling credential stuffing .
- Human error — misconfigured databases, lost devices, mis-sent files.
- Insider threats — misuse by someone with legitimate access.
What gets exposed
Breaches vary in severity depending on what leaks:
- Login credentials — emails and passwords (the most reused and dangerous).
- Financial data — card and bank details.
- Personal identifiers — names, addresses, Social Security or ID numbers.
- Sensitive records — health, legal, or biometric data.
Even “just” an email list has value for targeted phishing.
What to do if you’re affected
Act quickly to contain the fallout:
- Change the password on the breached account immediately — and anywhere you reused it.
- Turn on MFA so a stolen password alone isn’t enough.
- Watch your accounts for unfamiliar activity, and set up alerts.
- Freeze your credit if financial or identity data was exposed — see how to prevent identity theft .
- Beware follow-up scams — breaches are often followed by targeted phishing using the leaked details.
- Check exposure — breach-notification services can tell you what leaked.
How to protect yourself in advance
You can’t stop companies from being breached, but you can blunt the impact:
- Unique passwords everywhere, via a password manager , so one breach can’t cascade.
- MFA or passkeys on important accounts.
- Share less data — the less a company holds, the less can leak.
- Use encryption (HTTPS, encrypted backups) and keep software updated.
A note for businesses
If you handle customer data, you have legal and ethical duties: contain and investigate the breach, notify affected people and regulators within required timeframes, and harden systems against repeat incidents. Resources like the US FTC’s data-breach guidance outline the steps.
The bottom line
A data breach is the unauthorised exposure or theft of sensitive information, and in a connected world it’s a question of when, not if, your data appears in one. You can’t prevent every breach, but unique passwords with a manager, MFA or passkeys, and sharing less data dramatically limit the damage. If you’re affected, change passwords, enable MFA, watch for fraud, and stay alert to follow-up scams.
FAQs
- A data breach is when sensitive information — like passwords, card numbers, or personal details — is accessed, exposed, or stolen by someone who shouldn't have it. It can result from hacking, malware, weak passwords, or simple human error.
- Change the affected password immediately and anywhere you reused it, turn on multi-factor authentication, and monitor your accounts for unusual activity. If financial or identity data leaked, freeze your credit and watch for follow-up phishing that uses the stolen details.
- Common causes include phishing and stolen credentials, malware and ransomware, exploited software vulnerabilities, weak or reused passwords, human error like misconfigured databases, and insider misuse. Often several factors combine in a single breach.
- You can't stop companies being breached, but you can limit the impact: use a unique password for every account via a password manager, enable MFA or passkeys, share less personal data, and keep software updated. That way one breach can't unlock your other accounts.
- Companies are often required to notify affected users, so watch for official breach notices. You can also use reputable breach-checking services that tell you whether your email or accounts have appeared in known data leaks, then change those passwords.