A security incident during which confidential data or sensitive information is stolen or taken from a system, without the knowledge or authorization of the system’s owners, by either malicious insiders or external attackers.