TOPIC 05 OF 05
Confidential-data leakage
Contain exposure quicklySensitive information can leak when it is pasted into an unapproved service, retained in logs, exposed through a connector, retrieved for the wrong user, included in generated output, or sent by an agent to an unintended destination.
A meeting assistant summarizes a restricted acquisition discussion and posts it to a broad project channel because its destination rules were not constrained.
Redaction at the visible prompt is insufficient if attachments, metadata, retrieval indexes, logs, tools, or downstream outputs still contain the information.
Stop further sharing, preserve relevant logs, revoke exposed credentials, notify the designated privacy or security contact, assess affected data and people, and follow the incident process.