The Information Commissioner’s Office (ICO) defines a breach as a lapse of security resulting in ‘unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data’.
Breaches could include unauthorised third-party access, accidental transfer of personal data to incorrect recipients, lost or stolen devices containing personal data, or illicit alteration of data or loss of data availability.