Another common source of data breaches is phishing messages.

Phishing is when a scammer pretends to be someone trustworthy to steal sensitive information, like a password.

In practice, it usually means sending a message pretending to be from a trusted website to steal your password for that website.

A criminal might send an email saying your Amazon account’s been hacked, and asking you to follow a link to log in again.

This link won’t really log you in to Amazon. Instead, it’ll send your password directly to the scammer.

If you fall for a phishing email at work, or receive a message you’re not sure about, it’s important to let your organisation know immediately.

Employees raising the alarm have stopped many scammers from succeeding.