In more detail
Causes include hacking, stolen credentials, misconfigured storage, lost devices and insider mistakes. Many privacy laws require affected organisations to notify regulators and people within a set time. If your details are exposed, change the password anywhere you reused it, turn on Multi-factor authentication (MFA) and watch for Phishing that uses the leaked data.