Data leak
A data leak is a situation in which information about clients, employees or the company becomes available to outsiders without permission: through a hack, a mistake or an employee's intent.
What it is
The data ended up where it should not be. It is not always hackers. More often an employee exported the base before leaving, forwarded a file to the wrong person, left an open link to a spreadsheet or lost a phone without a password.
How it looks in practice
Clients start getting messages from a competitor who somehow knows their names and amounts. Or fraudsters write to clients in the company’s name and quote a contract number. Or a table with phone numbers appears online. Often the company learns about the leak last.
Why it matters
A leak hits in three places at once. Money: clients are lured away. Trust: people stop answering and paying because they fear fraud. Law: in many countries a leak of personal data must be reported to the regulator and to the affected people within a short time. Deadlines and procedure depend on the country, so check with a lawyer.
What to do in the first hours
Close the source: change passwords, end foreign sessions, revoke access. Find out what exactly left and over what period. Warn clients that the company never asks for codes and never asks to pay to new details. Record everything that was established.
The typical mistake
Giving every employee access to the whole base “just in case”. The wider the access, the bigger the leak and the harder it is to find where it came from.
More in Signals
- Client base security in messaging apps: who sees the conversations and how to prevent a leakA client base in messaging apps leaves quietly: with a rep who quits, in a spreadsheet “for myself,” in screenshots, on a personal phone. Protection starts with the owner’s decisions: the number and account belong to the company, the contract has an NDA, the client has consented, access is minimal, and departures follow a clear procedure.
- How to move a team from personal phones to company work numbersYou can move a team from personal phones to work numbers in a few weeks, step by step: audit, numbers registered to the company, parallel work, then dropping the personal ones. It matters because the client base and the correspondence belong to the company, not to a person. The leader sets the dates, and the contract and consent follow your country's laws.