← VCE Data Analytics U4O2

Deliberate threats to data

An intentional action by an attacker or malicious insider to steal, damage, alter or block access to data, usually for profit or revenge.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 8, ACARA Digital Technologies Years 7–8 — Networks and Cyber Threats — Module 6, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 13, QCE Digital Solutions Unit 4 — Complex Digital Data Exchange Problems and Solution Requirements — Module 24

Understanding Deliberate threats to data in VCE Data Analytics U4O2

What it does: The attacker is outside the organisation, the action is intentional theft, and the motive is profit. Deleting data on purpose is deliberate sabotage by an insider, and the motive is revenge. Deliberate threats are intentional. Mistakes and power failures are accidental or event-based threats. Sabotage is intentionally damaging or altering data or systems to cause harm. Saving a file in the wrong folder is a mistake. A malicious insider has legitimate access inside the organisation. The overseas hacker is an external attacker. A deliberate threat needs intent to steal, damage, alter or block access to data. Sending an email by mistake is human error.

Common mistakes: A phishing attack is planned and carried out on purpose by an attacker, so the intent must be deliberate, not accidental. A malicious insider acting out of revenge destroys data on purpose. Deleting by mistake would be an accidental threat, not a deliberate one.

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Deliberate threats to data to a class →

This module's key terms are also in a printable crossword (Modules 1–25) and word search (Modules 1–43).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
A staff member copies the customer database to sell to a competitor. Is this a deliberate threat?
Yes, it is intentional theft of dataNo, it is an accidental threat
Matches
A staff member accidentally emails a customer list to the wrong person, so this is a deliberate threat.
↓
An accident has no intent, so it is an accidental threat, not a deliberate one.
Applying
Meanings
Term
deliberate threat
Meaning
An intentional action by an attacker or malicious insider to steal, damage, alter or block access to data, usually for profit or revenge.
Practice
Deliberate threat: intentional action to steal, damage, alter or block access to data
Testing
Gaps
A threat is done on purpose.
Check Answer
Spots
1threat: phishing attack
2intent: accidental

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Owl' badge — Wise Coder, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. A staff member copies the customer database to sell to a competitor. Is this a deliberate threat?
A. Yes, it is intentional theft of data ✓
B. No, it is an accidental threat
The person acted on purpose to steal data for profit, so it is a deliberate threat from a malicious insider.
2. Which best describes a deliberate threat to data?
A. An intentional action to steal, damage, alter or block access to data ✓
B. Any event that harms data, including mistakes and power failures
Deliberate threats are intentional. Mistakes and power failures are accidental or event-based threats.
3. An unhappy employee deletes key files on their last day to get back at the company. What is the motive?
A. Profit
B. Revenge ✓
The employee wants to harm the organisation out of anger. Revenge is a common motive for sabotage by malicious insiders.
4. A hacker outside the organisation breaks into a network to sell stolen credit card numbers. This is an example of:
A. An external attacker acting for profit ✓
B. A malicious insider acting for revenge
The hacker is outside the organisation and wants money, so this is an external attacker with a profit motive.
5. An employee accidentally emails a spreadsheet to the wrong person. Is this a deliberate threat?
A. Yes, because data was exposed
B. No, there was no intent to cause harm ✓
Deliberate threats require intent. Sending data to the wrong person by mistake is an accidental threat, even though data was exposed.

Match the Pairs

deliberate threat → An intentional action by an attacker or malicious insider to steal, damage, alter or block access to data
malicious insider → An employee or contractor who misuses their authorised access on purpose, for example to steal customer records out of revenge
An external attacker deliberately steals data to sell it for profit → A hacker breaks into a clinic's database and sells patient records on the dark web
A disgruntled staff member sabotages data out of revenge → Before leaving, an angry employee deletes the sales database on purpose
A staff member accidentally emails a customer list to the wrong person, so this is a deliberate threat. → An accident has no intent, so it is an accidental threat, not a deliberate one.
Deliberate threats only come from external hackers, never from people inside the organisation. → Deliberate threats can also come from malicious insiders who misuse their access on purpose.

Key Term

deliberate threat
An intentional action by an attacker or malicious insider to steal, damage, alter or block access to data, usually for profit or revenge.

Fill in the Blanks

1. A deliberate threat is done on purpose.
Hint: Type the word describing a threat that is intentional, not accidental.
2. Hacker from outside = external attacker
Hint: Type the word for an attacker who is not part of the organisation.
3. A malicious insider is a staff member who intentionally steals or damages data.
Hint: Type the two-word term for an employee or trusted user who deliberately harms data.
4. Selling stolen card data to make money has the motive of profit
Hint: Type the motive of an attacker who wants financial gain.
5. An ex-employee deletes files for revenge: this deliberate damage is sabotage
Hint: Type the term for deliberately damaging or destroying data to harm an organisation.

Spot the Error

Question 1
A threat: phishing attack
B intent: accidental
C actor: external attacker
Line B — A phishing attack is planned and carried out on purpose by an attacker, so the intent must be deliberate, not accidental.
Question 2
A threat: disgruntled employee
B actor: malicious insider
C motive: revenge
D action: delete data by mistake
Line D — A malicious insider acting out of revenge destroys data on purpose. Deleting by mistake would be an accidental threat, not a deliberate one.
Question 3
A IF intent = accidental THEN
B type ← deliberate threat
C ELSE
D type ← accidental threat
E END IF
Line A — The first branch sets the type to a deliberate threat, so its condition must test for intent = deliberate. Testing for accidental makes the logic backwards.
Question 4
A motive: honest mistake
B actor: external attacker
C action: steal card details
Line A — Deliberate threats have a purpose such as profit or revenge. An honest mistake is not a motive. Stealing card details for money has a profit motive.
Question 5
A threat: sabotage
B actor: malicious insider
C motive: revenge
D effect: data stays unchanged
Line D — Sabotage deliberately damages, alters or destroys data. If data stays unchanged, no sabotage has happened. The effect should be that data is destroyed.

Student with a class code? Join your class →