Knowledge Graph — Coursera Notes › Academic disciplines › Information Technology / Computer Science › Cloud Computing › Security

Data breach

concept · part of Security

A data breach is an incident where sensitive information is accessed or disclosed without authorization. It matters because it can lead to financial loss, reputational damage, and legal consequences, as seen in cases like MyFitnessPal.

Data breaches can result from unsecured environments, such as misconfigured cloud storage or weak access controls, and may involve various types of sensitive data including personal, financial, or health information.

Common causes include lack of encryption, insufficient access control, unpatched systems, and insecure third-party connections. Real-world examples include Anthem (2015), Target (2013), and Equifax (2017).

The Anthem breach resulted in a $115 million settlement and affected nearly 80 million individuals, underscoring the need to encrypt data at rest and in transit, and enforce strict access management for sensitive health information.

The Target breach (2013) originated from credentials stolen from a third-party HVAC contractor, exploiting insufficient network segmentation and inadequate endpoint security to access customer payment card details. Over 40 million customers were affected, leading to an $18.5 million settlement and reputational damage. Lessons include securing public-facing endpoints, implementing multifactor authentication, and enforcing strict third-party vendor security protocols.

The Equifax breach (2017) exploited a known vulnerability in an unpatched web application, exposing Social Security numbers, birth dates, and addresses of ~147 million individuals, with a settlement up to $700 million. Lessons include timely patch management, protecting API endpoints, securing machine learning models from tampering, and conducting regular vulnerability assessments.

Inside Data breach (1)

• MyFitnessPal — A data breach case study where weak SHA-1 hashing exposed 150M accounts.

This is the text view of an interactive 3D knowledge graph — open this page with JavaScript enabled to explore it visually.