The correct response is:
A man-in-the-middle attack always involves changing the data.
This is because a man-in-the-middle (MitM) attack involves an attacker intercepting and potentially altering communication between two parties without their knowledge. In contrast, a violation of data confidentiality refers to unauthorized access to or disclosure of sensitive information, which does not necessarily require changing the data.