> Facebook did not authorize data retention. CA’s actions were therefore unauthorized use of data, which is the textbook definition of a data breach. But they

> Facebook did not authorize data retention. CA’s actions were therefore unauthorized use of data, which is the textbook definition of a data breach. But they did authorize data acquisition which means they weren't "breached" but fully consented to handing over the data. Be like HN saying I can read all the comments I want but can't copy them to my hard drive, if I did copy them and used them for some other purpose would this also be a "textbook definition of a data breach"?