A data breach can be defined generally as when sensitive or confidential information is accessed or disclosed without authorisation. The UK Information Commissioner defines a personal data breach as:
.. a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data. This includes breaches that are the result of both accidental and deliberate causes.