Start here
When something goes wrong online, it's tempting to say "I got hacked" and leave it there.
Security professionals ask a sharper question: what exactly was harmed? Was something seen that shouldn't have been, changed when it shouldn't have been, or made unavailable? Those three questions have a name: the CIA triad.