It is an event that indicates that the sensitive data of an organization have been compromised or measures put in place to protect that data has failed.
