A data breach is the outcome when data is exposed or stolen. It describes a result, not the method used to trick the employee. **Social engineering** manipulates a person into giving up information or access, here by impersonating someone the employee trusts. It targets the human, not the technology.