It’s not a breach… it’s just that someone else has your data

If you lose someone’s data because of a configuration blunder that lets crooks in without any actual hacking… is that a “breach” or not?