Which of the following best describes BEC?

$1.$

BEC refers to an attack where threat actors gain direct and public access to databases in order to churn sensitive data.

$2.$

BEC is a cyberattack in which credentials obtained from a data breach on one service are used to attempt to log in to another unrelated service.

$3.$

BEC is a form of phishing attack in which a cyber attacker impersonates a high$-$level executive $($often the CEO$).$

$4.$

BEC involves the possibility of a malicious attempt to damage or disrupt a computer network or system to access files and infiltrate or steal data.