Not every data breach is caused by a direct attack. Even though cyber attacks like hacking and malware can cause data breaches, other things like human error, system failures, or bad security practices can also cause sensitive information to be stolen or shown to the wrong people. Organizations should take a wide range of security measures and review their systems often to reduce the risk of a data breach, no matter what caused it.