Data leak

A data leak occurs whenever sensitive information is inadvertently disclosed or exposed to unintended people.

Some examples of data leaks, among others, are:

• A laptop, tablet, or smartphone that has been stolen or lost
• Losing a USB stick that contains sensitive data
• Giving permission to access data to the wrong people
• Files containing personal data that have been discarded and have fallen into the wrong hands
• Receiving an email from a colleague containing information that is not intended for you (eg. student grades)

Data leak vs. data breach

A data leak is usually an accident, while a data breach is often intentional and malicious (involving a cyberattack). Data leaks are often the ground for data breaches to take place - which potentially can have far-reaching consequences for data subjects and/or organizations not limited to identity theft, fraud, financial loss, unauthorized reversal of pseudonymisation, damage to reputation, loss of trust, etc.

How can I prevent it?

While cybersecurity teams have the crucial task of ultimately preventing and resolving data breaches, every UG member should be aware of their responsibility to avert data leaks and be conscious of preventing measures.

Below are some examples of practices that help minimize the occurrence of data leaks:

• Perform regular password hygiene and always use different passwords for different accounts
• Make sure to log off from shared devices
• Delete old data
• Be aware that emails and chats are a fruitful ground for scams and social engineering practices
• If you leave your desktop computer or laptop you should lock the device

What should I do in case of a data leak?

In case something unintended occurs, the UG has set up a procedure for data leaks (or potential data leaks) that all users must follow. Acting fast can prevent the information from falling into the wrong hands and prevent a data breach. Please contact the data leak contact desk at databreach@rug.nl as soon as possible - also in cases where you just suspect that you might have a data leak.