Type of incident where
information is disclosed to unauthorized individuals or a
violation of the security policy of a system in which unauthorized
intentional or unintentional disclosure, modification,
destruction, or loss of an object may have occurred."