It’s a busy Tuesday afternoon. Your website quietly goes dark. Not because of a hack, but because a vulnerability was found in a programming language your site runs on, and the safest thing to do was pull it offline before anyone could exploit it.
That’s not hypothetical. It happened this week.
CVSS severity rating for the two critical flaws discovered
of the world’s websites run on PHP, the programming language at the centre of the vulnerability
UK organisations warned by the NCSC about potential exposure
UK government services taken offline as a precaution, with 4 more partially unavailable
hosts worldwide running unpatched PHP versions with no fix available
Data breaches don’t always start with a hooded figure in a dark room: they start with unpatched software, a misdirected email, a weak password, or a supplier who hasn’t tightened their own defences. Understanding how breaches happen is the first step to preventing them.
What is a data breach?
A data breach occurs when someone gains unauthorised access to confidential, sensitive, or personal information. This can result in files being viewed or shared without permission and used for financial gain. Everyone is vulnerable, from individuals to large organisations and governments.
Data breaches usually happen because of weaknesses in technology or human behaviour. As devices become more interconnected, the opportunities for breaches multiply. The pace of innovation tends to outstrip the pace of protection, and that gap is where attackers live.
Five questions to ask about your business
- When was the last time you inventoried every system that touches customer or employee data?
- If your website went offline tomorrow, how quickly could you tell whether it was a vulnerability or an attack?
- Which of your third-party suppliers or partners have access to your systems, and when did you last review their security posture?
- If an employee clicked a malicious link today, would you know within hours, days, or not until something broke?
- What's your plan for the first 24 hours after a breach, and who owns it?
Types of data breaches
Cyberattacks exploit security vulnerabilities to access and compromise confidential information. Here are the five most common types UK businesses face:
How data breaches occur: anatomy of an attack
Data breaches don’t just happen. They follow a sequence, and understanding that sequence is how you spot the signs early.
Reconnaissance
having a good look around.
Exploitation
finding the open window.
Elevation of privilege
helping themselves to the master keys.
Data exfiltration
filling their pockets.
Covering tracks
wiping the fingerprints.
Protect your business from data breaches
The best time to strengthen your defences is before you need them. Here’s a practical sequence for protecting your organisation:
- Know what you've got. Identify every system, device, and data set that touches your business. You can't protect what you can't see. Start with cybersecurity solutions that map your full attack surface.
- Watch for trouble. Continuous monitoring catches threats before they become breaches. The faster you see it, the less damage it does. Managed detection and response keeps eyes on your environment around the clock.
- Test your own defences. Find the gaps before someone else does. Regular penetration testing is how you stay a step ahead.
- Keep everything patched. Unpatched software is the open window. This week's PHP vulnerability proved that. Patch management as a service takes that burden off your team.
- Secure your cloud. As infrastructure moves online, cloud governance and security controls become non-negotiable.