← Years 7–8 Digital Systems

Data breach

When attackers get into an organisation's stored data, such as usernames and passwords. Find out through alerts, then change your password and turn on MFA.

Part of: 7-8 Digital Technologies Vic Curric - Digital Systems and Security — Module 54, 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 82, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 21, VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 116, 9-10 Digital Technologies: Data privacy and the Australian Privacy Principles — Module 22, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 8, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 17, ACARA Digital Technologies Years 9–10 — Privacy Principles and Digital Footprints — Module 52, WA Computer Science ATAR Year 11 — Data Management — Module 109, WA Computer Science ATAR Year 11 — Cyber Security — Module 158

Understanding Data breach in Years 7–8 Digital Systems

What it does: Changing the password stops attackers using the stolen one to log in. MFA means a stolen password alone is not enough to get into the account. A data breach is when attackers access data an organisation stores. It is not about a slow device. Breaches usually hit organisations that store lots of customer data, so your details can be stolen even if you did nothing wrong. Organisations and breach-checking websites send alerts to tell people their details were in a breach. Fake breach alerts can be phishing. Visit the real site by typing its address or using your saved bookmark.

Common mistakes: The steps should run when a breach alert has been received, so the test must be alert = true. With false, the password would never be changed. A breach checker site asks for your email address. You should never type your password into it. The line should be enter(email).

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Data breach to a class →

This module's key terms are also in a printable crossword (Modules 26–74) and word search (Modules 4–74).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
What is a data breach?
Your computer runs slowly because too many apps are openAttackers get into an organisation's stored data, such as usernames and passwords
Matches
Breach email received: ignore it, nothing to do
↓
Ignoring a breach alert leaves the stolen password working for attackers. You should check the alert is real, then change your password and turn on MFA.
Applying
Meanings
Term
data breach
Meaning
When attackers get into an organisation's stored data, such as usernames and passwords. Find out through alerts, then change your password and turn on MFA.
Practice
IF breach_alert = true THEN
Testing
Gaps
Find out about a breach by an email
Check Answer
Spots
1alert ← true
2IF alert = false THEN

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Dolphin' badge — Reef Streak, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. What is a data breach?
A. Your computer runs slowly because too many apps are open
B. Attackers get into an organisation's stored data, such as usernames and passwords ✓
A data breach is when attackers access data an organisation stores. It is not about a slow device.
2. Whose stored data is usually taken in a data breach?
A. An organisation's, like a company that keeps your account details ✓
B. Only the data saved on your own phone
Breaches usually hit organisations that store lots of customer data, so your details can be stolen even if you did nothing wrong.
3. Which is a way people find out about a data breach?
A. An alert or email from the company or a breach-checking service ✓
B. Your keyboard stops working
Organisations and breach-checking websites send alerts to tell people their details were in a breach.
4. You get a real alert that your account was in a breach. What should you do first?
A. Change your password for that account ✓
B. Ignore it because nothing looks different
Attackers may already have your password. Changing it quickly stops them using it to get into your account.
5. After a breach, which extra step helps protect your account?
A. Share your new password with a friend to keep it safe
B. Turn on multi-factor authentication (MFA) ✓
MFA adds a second check, so a stolen password alone is not enough to get in. Passwords should never be shared.

Match the Pairs

data breach → When attackers get into an organisation's stored data, such as usernames and passwords
breach alert email → A message from a company or a breach-checking site telling you your details may have been exposed
After a breach, change the password for the affected account straight away → Settings > Security > Change password
After a breach, add an extra layer of protection to the affected account → Settings > Security > Turn on MFA
Breach email received: ignore it, nothing to do → Ignoring a breach alert leaves the stolen password working for attackers. You should check the alert is real, then change your password and turn on MFA.
Breach: change password on one account only → If the same password is used on other accounts, attackers can try it there too. Change it on every account that used it.

Key Term

data breach
When attackers get into an organisation's stored data, such as usernames and passwords. Find out through alerts, then change your password and turn on MFA.

Fill in the Blanks

1. Find out about a breach by an alert email
Hint: Type the word for a warning message that tells you about the breach.
2. After a breach, change your password
Hint: Type the verb for the first step you take with your password after a breach.
3. After a breach, turn on MFA for extra safety
Hint: Type the short name for the extra login check that protects your account.
4. IF breach_alert THEN change_password()
Hint: Type the keyword that starts a decision in pseudocode.
5. data breach = attackers access stored data
Hint: Type the two-word term for attackers getting into an organisation's stored data.

Spot the Error

Question 1
A alert ← true
B IF alert = false THEN
C change_password()
D turn_on_MFA()
Line B — The steps should run when a breach alert has been received, so the test must be alert = true. With false, the password would never be changed.
Question 2
A site ← 'breach_checker'
B enter(password)
C IF found = true THEN
D change_password()
Line B — A breach checker site asks for your email address. You should never type your password into it. The line should be enter(email).
Question 3
A breached ← 'shop_account'
B keep_password(breached)
C IF reused = true THEN
D change_password(other)
Line B — After a breach you must change the password on the breached account. The line should be change_password(breached), not keep the old password.
Question 4
A notice ← 'data breach email'
B IF sender_checked = true THEN
C open_official_website()
D reply_with_password()
Line D — You should never send your password by email. After checking the notice, you change your password on the official website with change_password().
Question 5
A breach ← true
B IF breach = true THEN
C new ← old_password
D turn_on_MFA()
Line C — The old password may now be in the hands of attackers. After a breach the new password must be a unique passphrase, not the old password.

Student with a class code? Join your class →