As the story about Cambridge Analytica’s shady use of Facebook data plays out in press coverage, accurately characterizing the “breach” or “leak” of user information is important.

To many, those terms probably imply private information was hacked or stolen. In fact, Cambridge Analytica obtained data that Facebook’s rules allowed third parties to access, but did so under false pretenses and then exploited it for political purposes.