Loss
0 confirmed incidents.
VERIS: error:Loss
Loss is a regulator reporting category, not a MITRE ATT&CK technique: it is the label used on the HHS Office for Civil Rights breach portal and similar state breach-notification forms for an incident where a physical item carrying personal data, a laptop, phone, paper file or storage device, was misplaced rather than stolen or accessed by an attacker. Because there is no attacker in a loss incident, it is one of a small group of attack types on the site, alongside Theft and Improper Disposal, that describes what happened to the physical record rather than a step in a network intrusion.
No confirmed incidents currently carry this attack-type classification.
Questions and answers
How many confirmed incidents are classified as Loss on Breach Census?
0 confirmed incidents are currently classified as Loss.
Why doesn't the Loss classification map to a MITRE ATT&CK technique?
Loss is a regulator reporting category rather than an attacker technique -- it is used when a source document classifies an incident this way without specifying a technical method, so it has no MITRE ATT&CK id of its own.
What counts as a confirmed incident for the Loss classification?
An incident counts here once it carries the Loss attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.