An incident in which sensitive, protected, or confidential data is accessed, disclosed, or stolen by unauthorized individuals