Unauthorized access to information means obtaining access to the information stored on various media (hard copy, magnetic or optical medium, etc.) in databases, file storages, archives, security rooms, etc. of different organizations by changing (upgrading or tampering with) access rights. Unauthorized access can be obtained by exploiting faults in the controlling structure or a computer security system, by substituting verification documents or unlawfully getting hold of information about a person that was granted access rights. Cybercriminals may obtain unauthorized access by attacking websites or web apps that are infected, hacked or have unpatched vulnerabilities. Another way is to launch a DDoS-attack.