Comment by jacquesm

That is not how it works.

A breach is unauthorized disclosure, the mechanism through which it is achieved is not relevant to that classification.

An employee that walks out with a file would also be classified as a breach, even if no systems got compromised from the outside.