Security Breach

Attackers use many methods to violate security policies, procedures, and systems. Three common security breaches are:

Viruses, Spyware, and Other Malware

A common practice for breaking into protected networks used by cybercriminals is the use of malicious software like viruses, spyware, and other types of malware that arrive via email or internet downloads.

For example, if a member of your organization opens a suspicious attachment received via email, it has the potential to infect the computer. The same can happen with a download from the internet. If these attachments or downloads contain viruses, then they can spread from one computer to others in the network.

Impersonation (Phishing)

Another common method used by cybercriminals is creating a security gap by sending fake but convincing emails impersonating an organization to an employee of the organization; also known as phishing. These emails are often made to look like urgent requests from executives or higher-ups, asking for sensitive information. Employees without the appropriate cybersecurity education and training may quickly respond with the request filled out, thus putting confidential information in the hands of cybercriminals.

Denial of Service (DDoS) Attacks

A DDoS attack is when hackers or cyber criminals make a website unavailable by flooding it with traffic. While it might not sound like it, these attacks are considered security breaches because they can overwhelm an organization’s security measures and hinder its ability to perform and provide business services.

Security Breach vs. Data Breach

The terms security breach and data breach are often used synonymously, but they are actually two different things, with security breaches occurring before data breaches.

A security breach is when an intruder bypasses security measures and reaches protected areas, putting them within reach of valuable information. If any of that sensitive data is stolen, then the incident advances from a security breach to a data breach.