A security incident where unauthorized parties access sensitive or confidential information like personal or corporate data. Preventative measures include technological safeguards, organizational policies, and compliance with data protection regulations.