A database is the structured storage layer where an application keeps, organizes, and retrieves information. It is more than a data container: its schema, permissions, indexing, and backup design shape how the system behaves. In practice, a database may hold accounts, messages, logs, files, or payment records, and the application asks it for data using queries.
In cyber security, databases matter because they often contain the most valuable targets in a system. Weak authentication, excessive privileges, injection flaws, exposed admin tools, and poor segmentation can let an attacker read, alter, or delete data. Defenders protect databases with least-privilege access, strong authentication, encryption, auditing, patching, and tested backups. In real incidents and defenses alike, the database is where privacy, integrity, and availability are either preserved or lost. When people say an app is “just storing data,” they are usually describing the part of the system that needs the most careful protection.