Confidentiality: NIST SP 800-122

Example of a Confidentiality Attack: 2024: InfoSys McCamish - Bank of America Breach

A data breach at a financial software provider compromised the name, address, date of birth, Social Security number, and other account information of customers whose accounts were serviced by Bank of America. 

A ransomware group known as LockBit accessed the customer information through InfoSys