A threat action in which sensitive data are directly released to an unauthorized entity is called what?

• A. Exposure
• B. Data breach
• C. Infiltration
• D. Unauthorized access

Answer: (A)

The term that accurately describes the situation where sensitive data are directly released to an unauthorized entity is a data breach. A data breach occurs when unauthorized individuals gain access to confidential information—this encompasses scenarios where data is intentionally or unintentionally disclosed to those who do not have permission to view it. Such breaches can occur due to various factors such as system vulnerabilities, negligent handling of data, or malicious attacks.

While "exposure" might imply that data has been revealed, it does not fully capture the essence of an unauthorized release as definitively as a data breach does. "Infiltration" refers more to the act of an entity gaining unauthorized entry into a system rather than the subsequent action of releasing sensitive data. Similarly, "unauthorized access" pertains to gaining access to data or systems without permission but does not imply that an actual release of data has occurred.

In summary, a data breach specifically denotes the unauthorized release of sensitive information to outside parties, making it the correct answer for this scenario.