Privacy incident

A privacy incident results from the loss of control, compromise, unauthorized disclosure, unauthorized acquisition, unauthorized access, or any similar term referring to situations where persons other than authorized users, and for an other than authorized purpose, have access or potential access to PII in usable form, whether physical or electronic. The term encompasses both suspected and confirmed incidents involving PII that raise a reasonable risk of harm.

Source

 * DHS Privacy Office, Privacy Incident Handling Guidance, § 2.4.11.