data leak
Unauthorized disclosure incident
A data leak is the unauthorized exposure of sensitive information, whether through hacking, negligence, or insider action.
Unlike a data breach, which implies forcible intrusion, a leak may be accidental—an unsecured database, a misconfigured server, an employee's careless email.
The company disclosed a data leak affecting millions of customers.
Covert withdrawal of people/data
- exposureState of being unprotected
- disclosureAct of revealing information
- unauthorized accessEntry without permission
- compromiseAgreement through mutual sacrifice
infiltration · incident · misconfiguration · insider threat · whistleblower · loss · theft · notification
Fraudulent credential harvesting
- malwareHarmful computer programs
- spywareHidden surveillance program
- ransomwareHostage-taking code
- keyloggerSoftware recording typed input
social engineering · brute force · zero-day · exploit · backdoor · botnet · man-in-the-middle · cyberespionage
Identifying details about someone
- PIIIdentity-revealing information
- identity theftStealing personal data criminally
- GDPREU data protection law
- HIPAAMedical privacy statute
consent · anonymization · profiling · surveillance · tracking · opt-out · privacy policy · right to be forgotten
Imperfection in something
- weaknessDeficiency in force
- exploitNotable act or abuse
- misconfigurationIncorrect system setup
- bugCrawling creature or defect
oversight · unpatched · open port · access control · supply chain · human error · legacy system · penetration testing
Converting data into code
- access controlRestricting resource availability selectively
- firewallNetwork access control system
- DLPDigital light processing
- monitoringOngoing observation of something
audit · tokenization · masking · segmentation · multi-factor authentication · zero trust · security training · backup
exfiltration
Covert withdrawal of people/data
- exposureState of being unprotected
- disclosureAct of revealing information
- unauthorized accessEntry without permission
compromise · infiltration · incident · misconfiguration · insider threat · whistleblower · loss · theft · notification · detection
phishing
Fraudulent credential harvesting
- malwareHarmful computer programs
- spywareHidden surveillance program
- ransomwareHostage-taking code
keylogger · social engineering · brute force · zero-day · exploit · backdoor · botnet · man-in-the-middle · cyberespionage · rootkit
personal information
Identifying details about someone
- PIIIdentity-revealing information
- identity theftStealing personal data criminally
- GDPREU data protection law
HIPAA · consent · anonymization · profiling · surveillance · tracking · opt-out · privacy policy · right to be forgotten · health records
flaw
Imperfection in something
- weaknessDeficiency in force
- exploitNotable act or abuse
- misconfigurationIncorrect system setup
bug · oversight · unpatched · open port · access control · supply chain · human error · legacy system · penetration testing · risk assessment
encryption
Converting data into code
- access controlRestricting resource availability selectively
- firewallNetwork access control system
- DLPDigital light processing
monitoring · audit · tokenization · masking · segmentation · multi-factor authentication · zero trust · security training · backup · classification
- consumer problemsdefective product, billing error, wrong item, hidden fees, hidden fee
- leaksleaks, seepage, drip, drips, trickle
- cyber threatsmalware, phishing, hacking, virus, ransomware
- cyberattacksmalware, phishing, ransomware, hack, virus
- Data Securityencryption key, password, passwords, access control, hacking
- information breachesconfidentiality breach, privacy breach, security breach, database breach, exposure
data leakdata protection
Securing sensitive information
data security · information security · confidentiality · data encryption · secrecy
data leakdata collection
Systematic accumulation of facts
data acquisition · data retention · data preservation · information gathering