← How you’re exposed

Tech teamRunning a website or small org

Data leakage & oversharing

Sensitive information slipping out through everyday mistakes.

Understand it

Not every loss is an intrusion. The wrong recipient, a spreadsheet with hidden columns, a detail in the background of a photo, or real customer data pasted into an AI prompt - each leaks information quietly.

How to spot it

The “reply all” you regret, an attachment holding more than you meant, a screenshot revealing private detail.

Close the gap

  1. Check recipients and attachments before sending.
  2. Share the minimum, and redact rather than merely hide.
  3. Do not paste real personal data into AI tools or unknown sites.
  4. Teach the team the common slips - they cause most of these.

What to do about it

This sits with whoever builds and runs your website or systems - it’s beyond what a personal plan should promise to fix. If that’s not you, hand it to whoever looks after your security. We’d rather be honest about where we stop.

Your own accounts and devices are still worth protecting; your plan covers those.