Data breach

Name:

Date:

Class:

Quick Questions

Shade in the A or B circle for each question.

1. What is a data breach?

A Your computer runs slowly because too many apps are open

B Attackers get into an organisation's stored data, such as usernames and passwords

2. Whose stored data is usually taken in a data breach?

A An organisation's, like a company that keeps your account details

B Only the data saved on your own phone

3. Which is a way people find out about a data breach?

A An alert or email from the company or a breach-checking service

B Your keyboard stops working

4. You get a real alert that your account was in a breach. What should you do first?

A Change your password for that account

B Ignore it because nothing looks different

5. After a breach, which extra step helps protect your account?

A Share your new password with a friend to keep it safe

B Turn on multi-factor authentication (MFA)

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left column		Right column
1data breach		ASettings > Security > Change password
2breach alert email		BWhen attackers get into an organisation's stored data, such as usernames and passwords
3After a breach, change the password for the affected account straight away		CIgnoring a breach alert leaves the stolen password working for attackers. You should check the alert is real, then change your password and turn on MFA.
4After a breach, add an extra layer of protection to the affected account		DIf the same password is used on other accounts, attackers can try it there too. Change it on every account that used it.
5Breach email received: ignore it, nothing to do		ESettings > Security > Turn on MFA
6Breach: change password on one account only		FA message from a company or a breach-checking site telling you your details may have been exposed

Definitions

data breach

Fill in the Blanks

Complete each line of code by filling in the missing parts.

Find out about a breach by an _____ email

After a breach, ______ your password

After a breach, turn on ___ for extra safety

__ breach_alert THEN change_password()

___________ = attackers access stored data

Spot the Error

Shade in the letter of the line that contains an error.

Question 1

A alert ← true

B IF alert = false THEN

C change_password()

D turn_on_MFA()

Question 2

A site ← 'breach_checker'

B enter(password)

C IF found = true THEN

D change_password()

Question 3

A breached ← 'shop_account'

B keep_password(breached)

C IF reused = true THEN

D change_password(other)

Question 4

A notice ← 'data breach email'

B IF sender_checked = true THEN

C open_official_website()

D reply_with_password()

Question 5

A breach ← true

B IF breach = true THEN

C new ← old_password

D turn_on_MFA()

Answer Key

Data breach

Section A: Quick Questions

B — Attackers get into an organisation's stored data, such as usernames and passwords

A — An organisation's, like a company that keeps your account details

A — An alert or email from the company or a breach-checking service

A — Change your password for that account

B — Turn on multi-factor authentication (MFA)

Section B: Match the Pairs

data breach → When attackers get into an organisation's stored data, such as usernames and passwords

breach alert email → A message from a company or a breach-checking site telling you your details may have been exposed

After a breach, change the password for the affected account straight away → Settings > Security > Change password

After a breach, add an extra layer of protection to the affected account → Settings > Security > Turn on MFA

Breach email received: ignore it, nothing to do → Ignoring a breach alert leaves the stolen password working for attackers. You should check the alert is real, then change your password and turn on MFA.

Breach: change password on one account only → If the same password is used on other accounts, attackers can try it there too. Change it on every account that used it.

Section C: Definitions

data breach — When attackers get into an organisation's stored data, such as usernames and passwords. Find out through alerts, then change your password and turn on MFA.

Section D: Fill in the Blanks

Find out about a breach by an alert email

After a breach, change your password

After a breach, turn on MFA for extra safety

IF breach_alert THEN change_password()

data breach = attackers access stored data

Section E: Spot the Error

B — The steps should run when a breach alert has been received, so the test must be alert = true. With false, the password would never be changed.

B — A breach checker site asks for your email address. You should never type your password into it. The line should be enter(email).

B — After a breach you must change the password on the breached account. The line should be change_password(breached), not keep the old password.

D — You should never send your password by email. After checking the notice, you change your password on the official website with change_password().

C — The old password may now be in the hands of attackers. After a breach the new password must be a unique passphrase, not the old password.