Data Breach or Data Loss

Threat in Cybersecurity & Technology Failure, arrives with intent

A cyber threat that exposes residents' and employees' personal data, with legal, financial and trust consequences.

Plans also call it: data breach, data loss, data exfiltration, PII breach, records breach, data theft

What you’d hand your council

The first page of a Data Breach or Data Loss evidence brief: likelihood, impact and readiness on your own scale, every figure sourced.

Evidence brief for Cedar Ridge County (example)

September 14, 2026

Data Breach or Data Loss

Threat in Cybersecurity & Technology Failure, on the established threats & hazards list

Impact
5432112345

Likelihood

Likelihood
3

Possible — Expected occasionally — roughly once in 10 to 50 years (2–10% chance in any year).

Impact
3

Moderate — Notable effects — injuries possible, damage in multiple areas, essential services disrupted for days.

Readiness
4

High — The organization has a well-developed capability to manage this threat or hazard. Plans, personnel, resources, and skills are largely in place, and the capability has been meaningfully tested or demonstrated. Remaining gaps are unlikely to significantly impair performance.

  • 2source documents
  • 58verified mentions
  • —federal declarations
  • —NRI risk score
Worked example: Cedar Ridge County is fictional. The scores illustrate the format and are nobody's decision. Open a full sample brief →

The national record

FEMA’s National Risk Index doesn’t model Data Breach or Data Loss. Your team fills it with local evidence, and Hazzard shows the gap rather than a zero.

How it maps

The same hazard in the vocabularies your plan and FEMA already use.

FEMA National Risk Index
Not covered
FEMA declaration incident type
Not covered
NOAA Storm Events type
Not covered
Hazzard category
Cybersecurity & Technology Failure, infrastructure and technology

The national record

What the federal data says about Data Breach or Data Loss: nothing yet

No federal dataset scores Data Breach or Data Loss or files declarations under it. That's common for threats and emerging hazards, and it's why a brief for Data Breach or Data Loss is built from your own plans, exercises and records. Hazzard shows the gap instead of inventing a number.

In your plan

What a Data Breach or Data Loss profile needs, and where each part comes from

A local hazard mitigation plan profiles each hazard the same way (44 CFR 201.6). Here is how Hazzard fills each part for Data Breach or Data Loss.

  1. Location

    44 CFR 201.6(c)(2)(i)

    Your documents

    No national layer maps Data Breach or Data Loss. We draw the geographic extent from your plans, studies and annexes, cited to the page.

  2. Extent

    44 CFR 201.6(c)(2)(i)

    Your documents

    The magnitude your plans use for Data Breach or Data Loss (a scale, a depth, an acreage, a duration), read from your documents and cited, so the profile states the strength you plan for.

  3. Previous occurrences

    44 CFR 201.6(c)(2)(i)

    Your documents

    FEMA files no declaration type for Data Breach or Data Loss. The history comes from your after-action reports, incident records and plans.

  4. Probability of future events

    44 CFR 201.6(c)(2)(i)

    Your team decides

    No national dataset gives a frequency for Data Breach or Data Loss. Your team scores likelihood on your scale from the evidence we organize.

  5. Vulnerability and impacts

    44 CFR 201.6(c)(2)(ii)

    Your documents

    The Census population profile and HHS emPOWER counts for context; the consequences themselves come from your plans and exercises.

  6. The assessment itself

    Your team decides

    Likelihood, impact and readiness for Data Breach or Data Loss are drafted with every source attached, and a person on your team accepts each one. Hazzard never records a score on its own.

How we can help

How we’d help you prepare for Data Breach or Data Loss

  1. 1

    We start from what you own

    Your continuity plan, IT and incident-response material and exercise reports, read so each statement about Data Breach or Data Loss points to its source.

  2. 2

    We show the gap honestly

    No national dataset scores this for your county. The brief says so, and your team's evidence carries the score.

  3. 3

    You leave with a cited brief

    Likelihood, impact and readiness for Data Breach or Data Loss on your own scale, every figure tied to its source, ready for the planning team or the council.

Also in Cybersecurity & Technology Failure

Preparing for Data Breach or Data Loss

Bring Data Breach or Data Loss into the hazard plan, with evidence behind it.

Cyber incidents now sit on most threat lists, usually as a paragraph. We help you assess them the way the rest of the plan is assessed: scored, cited and owned by someone. A person replies within one business day.

Already have an account? Sign in

Request a walkthrough

Takes about two minutes. A person reads every request.

Define your footprint on the map first