A data breach occurs when sensitive, protected or confidential information is stolen, accessed, or used without authorization. Every U.S. state, the European Economic Area (EEA), and several other countries all legally mandate timely data breach disclosure.