💧
Data Leak
Threats
Unintended disclosure due to misconfiguration or control failure.
Definition
A data leak is unintended disclosure of data due to misconfiguration, improper access controls, or workflow errors, and may occur without active exploitation.
In plain English
Unintended disclosure due to misconfiguration or control failure.
Why this matters
Why it matters: It indicates governance and security control gaps and can trigger compliance obligations.
Example
Example: Publicly exposed object storage with PII.