Data breach
When your data is stolen – definition, motives, and the complex investigation

Definition
Data breaches revealed: Understand what happens when sensitive information falls into the wrong hands, the motives behind them, and why they are central to true crime.
When your data is stolen – definition, motives, and the complex investigation
What is a data breach and why is it key to cybercrime?
In true crime, a data breach is defined as an incident where sensitive, protected, or confidential data is compromised through illegal access, copying, transmission, theft, or use by an unauthorized party. Far from being merely a technical mishap, a data breach often forms the core of modern cybercrime, with potentially far-reaching and devastating consequences for individuals, businesses, and government institutions. This makes the investigation of data breaches a central element in many criminal cases.
From financial gain to espionage: Data breach motives
The motives behind a data breach are diverse and can include financial gain through the sale of stolen personal information, credit card details, or login credentials on the dark web, which often leads to extensive identity theft with severe consequences for victims' finances and reputations. Other perpetrators use the compromised data for extortion, commit industrial espionage to gain competitive advantages, or engage in state-sponsored hacking for political or intelligence purposes. The data compromised in a breach can include a wide range of information: from deeply personal data such as personal identification numbers, financial information, and health records, to critical business secrets, intellectual property, and even national security information. This spectrum of potentially stolen data underscores the immense severity and far-reaching dangers associated with a data breach.
Victims' nightmares and investigators' fight: Cybercriminals
For victims of a data breach, the consequences can be long-lasting and deeply personal, including financial losses, significant emotional distress, and an often grueling battle to restore their identity and digital security. Organizations affected by a data breach face potentially enormous financial costs, loss of customer trust, severe reputational damage, and extensive legal repercussions. The investigation of data breaches itself is an extremely complex digital forensic process, where specialized cybercrime units must navigate a global network of anonymization techniques, encrypted systems, and jurisdictional barriers to track down and prosecute those responsible. A thorough understanding of data breaches is therefore essential in modern true crime, as this form of cybercrime represents an ever-growing and often invisible threat, whose technical complexity and severe consequences continue to challenge both investigators and societal efforts to improve information security and protection.
From stolen credit card details to extensive corporate espionage. What do data breaches look like in practice? Read our harrowing case studies on the subject below.
Read more
Ashley Madison Breach: 37 Million Exposed in 2015 Hack
In July 2015, hackers calling themselves "The Impact Team" breached Ashley Madison, a website marketed for extramarital affairs, stealing personal data from approximately 37 million users across 40 countries. The incident exposed not only intimate details but also widespread corporate deception that defined the scandal.
Hackers Steal $570 Million in Binance Coin Cyberattack
Unknown hackers exploited a vulnerability in Binance's BSC Token Hub bridge on October 4, 2022, stealing approximately 2 million BNB tokens valued at $570 million. The attack, discovered two days later, marked one of crypto's largest bridge heists but left user funds untouched.
U.S. Charges Chinese Military Officers in Massive Equifax Hack
U.S. federal prosecutors charged four members of China's People's Liberation Army on February 10, 2020, with orchestrating one of the largest data breaches in history. The defendants allegedly exploited a vulnerability in Equifax's systems to steal sensitive information from approximately 145 million Americans over a two-month period in 2017.
Related articles

Ashley Madison Breach: 37 Million Exposed in 2015 Hack
In July 2015, hackers calling themselves "The Impact Team" breached Ashley Madison, a website marketed for extramarital affairs, stealing personal data from approximately 37 million users across 40 countries. The incident exposed not only intimate details but also widespread corporate deception that defined the scandal.

Hackers Steal $570 Million in Binance Coin Cyberattack
Unknown hackers exploited a vulnerability in Binance's BSC Token Hub bridge on October 4, 2022, stealing approximately 2 million BNB tokens valued at $570 million. The attack, discovered two days later, marked one of crypto's largest bridge heists but left user funds untouched.

U.S. Charges Chinese Military Officers in Massive Equifax Hack
U.S. federal prosecutors charged four members of China's People's Liberation Army on February 10, 2020, with orchestrating one of the largest data breaches in history. The defendants allegedly exploited a vulnerability in Equifax's systems to steal sensitive information from approximately 145 million Americans over a two-month period in 2017.

700 Million LinkedIn Users' Data Sold on Dark Web Forum
In June 2021, a hacker using the username TomLiner posted personal data from approximately 700 million LinkedIn users—roughly 93% of the platform's membership—for sale on the dark web forum RaidForums. LinkedIn disputed the characterization as a breach, arguing the data came from public profiles and external sources rather than a direct hack of its systems.

500 Million Hotel Guests Hit by Massive Marriott Data Breach
A massive data breach at Marriott and its subsidiary Starwood exposed the personal information of up to 500 million hotel guests. Hackers had access to the reservation system from as early as 2014 — and went undetected for years.

The Mt. Gox Collapse: How Bitcoin's Largest Exchange Lost $450M
In February 2014, Mt. Gox—once the world's largest Bitcoin exchange—abruptly suspended trading and went offline, revealing the theft of over 744,000 Bitcoins worth approximately $450 million. The collapse exposed critical vulnerabilities in early cryptocurrency infrastructure and led to the arrest of CEO Mark Karpelès, a French businessman who had acquired the exchange just three years earlier.

Hafnium: How China Hacked Microsoft Exchange in 2021
The 2021 Hafnium attack: Chinese state hackers compromised thousands of Exchange servers globally. From espionage to worldwide ransomware chaos. Read the full story here.

7 Million Robinhood Users Hit by Data Breach
An unknown hacker infiltrated the American trading platform Robinhood on November 3, 2021, stealing data from approximately 7 million users. The attack was carried out by manipulating a customer support employee over the phone.

Hacker Steals $610M in Crypto, Then Returns It All
An unidentified hacker breached Poly Network, a decentralized finance platform, and stole $610 million in cryptocurrencies across multiple blockchain networks in August 2021. Within days, the attacker returned nearly all the funds, leaving investigators puzzled about the motive.

Twitch Breach Exposed Top Streamers' Million-Dollar Payouts
A hacker breached Twitch's internal systems in early October 2021, leaking source code, passwords, and payout data for thousands of streamers. The leaked information exposed two years of earnings data, revealing that top creators earned millions from subscriptions, ad revenue, and Bits donations.

WannaCry: The Ransomware Attack That Crippled the NHS
On May 12, 2017, the WannaCry ransomware attack struck more than 300,000 computers across 150 countries, but its impact on Britain's National Health Service proved particularly devastating. The attack infected at least 80 NHS trusts and over 600 primary care organizations, forcing hospitals to cancel thousands of procedures and revert to pen-and-paper record-keeping.

Dutch Regulator Fines Uber €290M for Illegal Data Transfers
The Dutch Data Protection Authority (DPA) issued a €290 million fine to Uber Technologies and Uber B.V. on August 26, 2024, for transferring personal data of European drivers to the United States without implementing mandatory legal safeguards required under GDPR.