Having unauthorized and unrestricted access to a company's database for illegal (or legal, as the case may be) purposes is a data breach or data leak.