1742
Once the hacking group has infiltrated a network , it conducts reconnaissance to ensure legitimate credentials have been gained , before deploying tools such as mimikatz or PwDump to steal additional credentials , administration credentials , and data from infected MSPs .
 data breach: have been gained
Please tell me event type and its trigger word from given type options. Output format is "type: trigger".  Option: phishing, data breach, ransom, discover vulnerability, patch vulnerability 
Text: {0} 
Answer:
 data breach: have been gained