Cyber security awareness

What is data leakage?

Data leakage occurs when sensitive (or personal) information is exposed to people or systems that should not have access to it.

Current trends show attackers exploit human error, misconfigured cloud services, weak authentication, and third-party software integrations to steal credentials, financial data, personal records, and intellectual property. Consequences for this includes identity theft, financial loss, reputational damage, and long-term privacy erosion.

AI and data leakage

Artificial intelligence (AI) is becoming increasingly integrated into our professional lives; however, it introduces significant data leakage concerns.

Uploading information to AI platforms may inadvertently disclose sensitive data, particularly if you are using unsecured websites or unauthorised tools. Furthermore, even anonymised data can potentially be re-identified through inference.

Ransomware and data leakage

Data leakage can occur as part of ransomware attacks, where sensitive information is stolen and used to threaten a company into paying a ransom. Often, paying the ransom does not prevent the criminals from disclosing what information they have stolen.

Common causes of data leakage

• Weak or reused passwords: Easily guessed or breached passwords let attackers pivot across multiple accounts.
• Phishing and social engineering: Convincing messages and cloned sites trick users into revealing credentials, sensitive information or downloading malware.
• Unencrypted or lost devices: Phones, personal laptops, and removable drives that are not encrypted will reveal stored data if they are lost or stolen.
• Insufficient account hygiene: Forgotten accounts, obsolete access permissions, and ignored security notices create lingering risks.
• Shoulder-surfing in public places: People overhearing your telephone conversation or viewing your laptop screen.

Public Wi-Fi: Handy but it is risky

Whether you are at a cafe, hotel, or airport, public Wi-Fi is convenient, but it can also be dangerous.

Common risks

• Man-in-the-middle attacks: Hackers intercept your data as it travels between your device and the internet.
• Fake hotspots: These mimic real networks to trick you into connecting.
• Malware: Some networks can install harmful software without your knowledge.
• Wi-Fi snooping: Cybercriminals use special tools to spy on your online activity.

How to stay safe on public Wi-Fi:

• Avoid logging into sensitive accounts (like banking) on public networks.
• Use a Virtual Private Network (VPN) to encrypt your connection.
• Ask staff for the correct network name before connecting.
• Turn off automatic Wi-Fi connections on your device.
• Keep your antivirus software up to date.

A reminder of the practical steps you can take today for data leakage

• Be aware when completing online forms, surveys and questionnaires, and think about the information you are providing.
• Check where you are sending emails, beware of people with similar names in your contacts list.
• Enable multi-factor authentication on all services that offer it, prioritising email, financial, and social accounts.
• Keep software, laptops and mobiles updated so security patches are applied promptly.
• Think before you click: verify sender addresses, hover over links, and treat unsolicited attachments as suspicious.
• Do not send sensitive information across the internet without encrypting.
• Limit third-party application access by revoking permissions on web services you no longer use.
• Be conscious of your surroundings when on the telephone or using your laptop in public spaces. People can hear your telephone conversations and view your laptop screen.

Final thoughts

Cybersecurity is not just for tech professionals it is for everyone. With a few simple habits, you can enjoy the benefits of the internet while keeping your personal information safe.

Whether you are browsing from home or on the go, staying informed is your best defence.