A security event that has actually or potentially jeopardized the confidentiality, integrity, or availability of an information system.