Data Leak Analysis: Least Privilege
Overview
A sales representative accidentally shared a link to an internal folder (unreleased product files, customer analytics) instead of approved promotional materials. A business partner then posted the link publicly.
What I did
- Identified where the least privilege control broke down: access to the internal folder was never revoked after the meeting.
- Documented the issue and recommended changes to prevent similar leaks.
The deliverable
