Sensitive Data Exposure

Sensitive data exposure occurs when applications fail to adequately protect sensitive information like financial records, health data, or credentials from unauthorized access or disclosure. Common causes include lack of encryption at rest or in transit, weak cryptographic algorithms, data retained longer than necessary, and overly broad access controls.

The OWASP Top 10 addresses this as Cryptographic Failures, emphasizing proper encryption, key management, and data minimization.