This is when a malicious third party breaks into a user’s account. Often the account contains personal details, which can be used for more serious forms of identity theft.