An infrastructure breach is a compromise of the systems that run a service, rather than just one user account. It can involve servers, cloud consoles, databases, storage buckets, build systems, bot backends, or service tokens. Because these components support the whole application, an attacker who gets in may be able to read data, change configuration, create new access, or move into connected services.
This matters in cyber security because infrastructure access is usually more powerful than a single login. In real attacks, stolen cloud credentials, exposed API keys, or weak admin controls can lead to database exfiltration, log theft, or payment and billing abuse. Defenders reduce the blast radius with least privilege, secret rotation, network segmentation, MFA, activity monitoring, and isolated service accounts. Treating the backend as part of the attack surface is essential: if the infrastructure falls, every account and user that depends on it may be affected.