An incident involving suspected or confirmed unauthorized access, exposure, theft, or misuse of credit card payment information, including cardholder data, payment systems, or payment processing activities. Such incidents require prompt investigation, containment, and escalation in accordance with PCI DSS and institutional incident response procedures.