A data breach points to a security breach leading to the accidental or illicit destruction, loss, alteration, disclosure or access to personal data transmitted, stored or processed. Under GDPR, IEEE has only 72 hours to inform or notify EU authorities after discovering a data breach.