Incidents where sensitive or confidential data is exposed, stolen, or accessed without authorization, requiring CISOs to focus on prevention, detection, and post-breach remediation strategies.