The company defines data breaches as confirmed incidents “where credentials, personal, medical, financial or other records with sensitive data have been accessed or disclosed due to being hacked or leaked, either deliberately or by accident.”