I was going to add that it's not always a data breach. Sometimes it's rogue employees, or it could be dumpster diving. There could be less-sophisticated to the more-sophisticated data breaches. There are various ways that data could be compromised.
On May 27th, 2014. See this statement in context.