How breaches really happen

The picture of a hooded genius cracking encryption is mostly fiction. Most incidents are simpler and sadder.

The common roads in

• Stolen or reused passwords. A password leaked from one site is tried on your email, your bank and your cloud storage.
• Phishing. A convincing message tricks someone into typing a password or approving a login.
• Unpatched software. Known flaws stay open on devices nobody updates.
• Misconfiguration. A storage folder left open to the public, or a default password never changed.
• Insiders and lost devices. Someone with too much access, or a phone with no lock.

What the damage looks like

Drained accounts, stolen identities, private photos leaked, client files exposed, and a business that loses trust it spent years earning. Much of this cannot be undone, which is why prevention is far cheaper than repair.

Layers beat any single lock

1. Unique passwords, kept in a password manager.
2. Two-factor sign-in on email and money accounts.
3. Automatic updates.
4. Encrypted storage, so a stolen device or database is just scrambled data.
5. A plan for the worst day: recovery keys saved, backups tested.

Run the quick privacy checkup to see where you stand.