Data Breaches as a Cyber Risk
Explains how data breaches -- unauthorized access to stored digital information -- expose personal and business data to exploitation as a consequence of globalized, interconnected digital infrastructure. The key insight is that the same digital connectivity enabling global economic integration creates a single point of failure through which financial, personal, and corporate information can be accessed, stolen, and misused at scale, undermining trust in institutions and challenging state and corporate capacity to protect citizens and consumers. Contains: text explanation, worked example of a corporate data breach, key-concept callout distinguishing data breach from related cyber threats, and a common-mistake callout on conflating breaches with hacking motives.
A data breach occurs when an unauthorized individual or organization gains access to data that is stored, transmitted, or processed by another party -- typically a business, government agency, or online platform. Unlike a physical theft, a data breach does not remove a tangible object; it copies or exposes information, which can then be sold, leaked, or exploited while the original holder may not even realize immediately that a breach has occurred. This makes data breaches a distinctive feature of risk in a globalized, digitally interconnected world: the same networks that allow instantaneous financial transactions, cloud storage, and cross-border communication also create pathways through which malicious actors can access millions of records in a single intrusion.
Data breaches typically expose two broad categories of information. Personal data includes names, addresses, dates of birth, social security or national identification numbers, health records, and login credentials. Business data includes trade secrets, financial records, client databases, and strategic communications. Once exposed, this information can be exploited in several ways: identity theft (using stolen personal details to open accounts or commit fraud), financial fraud (using stolen card or banking details), corporate espionage (using leaked trade secrets to gain competitive advantage), and extortion (threatening to release sensitive data unless a ransom is paid). Because digital infrastructure is globally networked, a breach originating in one country can expose the data of citizens and companies located anywhere in the world, illustrating how cyber risk operates independently of physical borders.
A data breach is specifically about unauthorized access to and exposure of stored data. It is distinct from a ransomware attack, where data is encrypted and held hostage for payment, and from general surveillance, where data is collected legally (though often controversially) by governments or corporations themselves. A single cyber incident can involve more than one of these -- for example, hackers may breach a database and then deploy ransomware -- but the terms describe different mechanisms of risk.
The consequences of data breaches extend beyond the immediate victims whose data is exposed. For businesses, breaches damage consumer trust, trigger regulatory fines (for example under the EU's General Data Protection Regulation), and can cause significant share-price and reputational harm. For states, large-scale breaches of citizen data raise questions about the adequacy of cybersecurity regulation and a government's capacity to protect its population, echoing broader tensions around sovereignty discussed in this subtopic: just as tax avoidance by TNCs erodes a state's fiscal control, weak cybersecurity regulation exposes the limits of state control over data that flows across borders through global digital infrastructure.
Analysing a corporate data breach
- Identify the vulnerability: a multinational retail company stores millions of customer records (names, card numbers, addresses) on a centralized cloud server with outdated security software.
- Describe the breach: hackers exploit the outdated software to gain unauthorized access, copying the customer database without immediately being detected.
- Explain the exploitation: stolen card numbers are sold on illicit online marketplaces; some customers subsequently experience fraudulent charges and identity theft.
- Explain the business consequence: the company faces regulatory fines, costly security overhauls, and a loss of consumer trust that reduces sales.
- Link to globalization: because the company operates across multiple countries, the breach exposes data of customers in many jurisdictions simultaneously, showing how digital interconnectedness magnifies the scale of a single security failure.
Common mistake: Students often assume every data breach is caused by an external "hacker" deliberately breaking through security systems. In reality, many breaches result from internal negligence -- an employee losing a laptop, misconfiguring a cloud database, or falling for a phishing email. When explaining causes of data breaches, do not assume malicious hacking is the only mechanism; unauthorized access can also result from careless handling of data.
- A data breach = unauthorized access to, or exposure of, stored personal or business data.
- Exposed data types: personal (identity, financial, health) and business (trade secrets, client records).
- Exploitation routes: identity theft, financial fraud, corporate espionage, extortion.
- Distinct from ransomware (data encrypted/held hostage) and surveillance (data collected, often legally, by states/corporations).
- Global digital infrastructure means a single breach can expose data across many countries at once.
- Consequences include regulatory fines, reputational damage, and reduced state/corporate credibility.
Economic Disruption of Supply Chains
Explains how global supply chains, built on interdependence and just-in-time production, are vulnerable to economic disruptions such as pandemics and labour strikes that halt production or distribution at critical nodes. The key insight is that because supply chains are highly interconnected and geographically stretched, a shock at one node (a factory, a port, a workforce) cascades outward to cause shortages, price rises, and production stoppages far from the original disruption. Contains: text explanation of supply chain interdependence, a worked example tracing a labour strike's ripple effects, and a common-mistake callout distinguishing economic disruption from physical/political disruption.
Global supply chains link raw material extraction, component manufacturing, assembly, and final distribution across multiple countries, often coordinated through just-in-time (JIT) production models that minimize warehousing costs by keeping inventories low. This efficiency comes at a cost: JIT systems have little slack to absorb shocks, so when a critical node in the chain fails, disruption spreads rapidly along the network rather than staying contained.
Among the three broad categories of supply chain vulnerability identified in globalization risk frameworks — political, economic, and physical — economic disruptions specifically arise from events that interrupt the human and financial functioning of production and distribution, rather than physical infrastructure or state policy. Two major examples are:
- Pandemics: Illness among the workforce, factory closures, quarantine measures, and border restrictions on the movement of workers and goods can simultaneously reduce production capacity (supply shock) and shift consumer demand (demand shock). Because TNCs often source components from many countries to reduce costs, a health crisis concentrated in one manufacturing hub can stall assembly lines thousands of kilometres away that depend on those components.
- Labour strikes: Industrial action by port workers, truck drivers, factory employees, or logistics staff can halt the movement of goods at critical chokepoints (ports, distribution centres, rail hubs). Even a localized strike can create a bottleneck that delays shipments globally, because modern supply chains rely on a small number of major transit hubs.
Key concept: Economic disruption differs from political disruption (sanctions, trade wars — deliberate state action) and physical disruption (natural disasters blocking shipping routes — environmental hazard). Economic disruption originates in the labour force or economic system itself: illness, absenteeism, industrial action, or demand/supply shocks.
Tracing the ripple effect of a port workers' strike
- Identify the node affected: dockworkers at a major container port refuse to work, halting the loading and unloading of ships.
- Identify immediate effects: container ships queue offshore; scheduled unloading of imported components and exported finished goods is delayed.
- Trace effects along the chain: factories relying on 'just-in-time' delivery of components run out of stock within days and must slow or halt production lines.
- Trace effects to consumers and other regions: retailers elsewhere in the world experience shortages of goods normally routed through that port, and prices may rise due to scarcity.
- Evaluate: the strike itself is a localized labour dispute, but because supply chains concentrate flows through a small number of hub ports, its economic consequences are transmitted globally, illustrating how interdependence amplifies rather than dilutes disruption.
Common mistake: Students often describe any supply chain disruption as caused by 'globalization' in vague terms, without identifying the specific mechanism. For AO2 marks, always specify whether the disruption is economic (e.g. strikes, pandemics affecting labour supply), political (e.g. tariffs, sanctions), or physical (e.g. natural hazards blocking routes) — examiners reward precise categorization and a clear causal chain from disruption to consequence.
- Just-in-time (JIT) production minimizes inventory costs but leaves supply chains with little slack to absorb shocks
- Economic disruption = disruption from labour/economic system failure (pandemics, strikes), distinct from political (sanctions, trade wars) or physical (natural disasters) disruption
- Pandemics cause both supply shocks (workforce illness, factory closure) and demand shocks (changed consumer spending)
- Labour strikes at chokepoint hubs (ports, rail) have disproportionate global impact because supply chains funnel through few major nodes
- Interdependence means a localized disruption can cascade into shortages and price rises in geographically distant markets
3D Printing Technology
Introduces 3D printing (additive manufacturing) as a disruptive technology that builds objects layer by layer from digital designs, enabling decentralized, on-demand production anywhere in the world. The key insight is that this shift from centralized factory-based manufacturing to distributed, local printing threatens established geopolitical and economic structures, including intellectual property control and weapons regulation. Contains: text explanation of the additive manufacturing process, a worked example tracing the print process step-by-step, and an exam-tip callout distinguishing additive from subtractive manufacturing.
3D printing, also known as additive manufacturing, is a process that constructs three-dimensional objects by depositing successive layers of material—typically plastic, resin, or metal powder—according to a digital blueprint (a CAD, or computer-aided design, file). This contrasts with traditional subtractive manufacturing, where a solid block of material is cut, drilled, or machined down into the desired shape, generating significant material waste. Because the object is built up rather than carved out, 3D printing can produce complex geometries with far less waste and without the need for specialized factory tooling.
The significance of this technology for global risk and resilience lies in its decentralizing effect. A digital design file can be transmitted instantly across borders and printed almost anywhere a suitable printer exists—in a home, a small workshop, or a remote community—removing the need for large centralized factories, global shipping networks, or state oversight of production. This decentralization is a double-edged process: it can build local resilience (for example, printing spare parts or medical equipment on-site during a supply chain disruption), but it also erodes the ability of states and corporations to monitor, tax, and regulate what is being manufactured, including sensitive items such as weapon components or patented designs.
Tracing the additive manufacturing process
- A digital 3D model of the object is created or downloaded as a CAD file.
- Specialized software slices the model into hundreds or thousands of thin horizontal cross-sections.
- The printer reads these slices and deposits material (e.g., melted plastic filament, liquid resin, or metal powder) one layer at a time.
- Each new layer bonds to the one below it, gradually building the object's full three-dimensional shape from the base upward.
- Once printing finishes, the object may require minimal post-processing (removing support structures, curing, or polishing) compared with traditional manufacturing.
Exam tip: When asked to describe or explain 3D printing, always name it explicitly as additive manufacturing and contrast it with subtractive manufacturing—examiners reward precise terminology over vague descriptions of 'printing an object'.
- 3D printing = additive manufacturing: objects are built layer by layer from a digital CAD file.
- Contrasts with subtractive manufacturing, which cuts material away from a solid block, producing more waste.
- Enables decentralized, on-demand production without reliance on centralized factories or long supply chains.
- Raises geopolitical risks: harder to regulate intellectual property theft and illegal weapons manufacturing.
- Can build local resilience by allowing communities to print essential items during supply chain disruptions.