Compromise means disclosure of information to unauthorized persons or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object, or the copying of information to unauthorized media may have occurred.
Source: CFR 252.204–7012 Safeguarding covered defense information and cyber incident reporting.