How your data is handled, one industry at a time

What leaks is what you watched, tied to a card and increasingly to an ID check. Leaks in this corner have been followed by extortion mail, and accounts people had paid to delete were still in them.

A leak exposes an inference file: what you buy, what you earn, what you are worth targeting for. UK and US regulators found segments covering mental health, sexual health, substance use and politics, tied to precise location: conclusions you never stated.

A connected car logs where you went and how you drove, and makers have left exactly that exposed on the open internet for months at a time. Where the file is finance instead, it is your income and your credit history.

What leaks here is the content itself: the files, the messages, the drafts you never finished. On a work account the breach reaches everyone whose documents sat in it, none of whom picked the vendor.

A leak here names you as someone who holds crypto, with your ID and often your home address attached. Buyers on one leaked customer list were phished and then threatened with violence in person.

What leaks here is who you want, what you believe, and what you said in private. People have been outed and extorted with exactly this, and changing a password undoes none of it.

What leaks is a list of things you never said out loud: what you bought, when, and the address it went to. Purchases imply diagnoses, pregnancies and beliefs you never declared. Gifts you sent put other people's homes in the file too.

What you studied says what you were trying to fix or become: a career change, a gap you were closing, a subject you would not raise. Leaked with the card that paid for it, it reads as a plan you never announced.

A school or university record follows you into adulthood: grades, discipline, special-needs assessments, family circumstances. One breach took the records of more than sixty million students at once.

What you watch is treated as sensitive enough that US law puts a price on disclosing it. A leak turns a viewing history into something a stranger can read back to you.

A finance file names what you hold, what you owe and what you move, beside the ID documents that opened the account. Leaked, it is both the means to impersonate you and the reason to pick you as a target.

This is body data: weight, heart rate, cycles, the routes you run and the hours you turn up. Leaked, it shows a health picture and a daily pattern precise enough to say when your home is empty.

Your home address sits attached to your name, your phone number and the hours you are usually in. Breaches here have spilled that exact set for millions of customers at once.

A betting history gets used against people: by a partner, in a custody case, by an employer. Leaked with the ID and bank details an account requires, it is an exposure and a fraud kit at once.

A gaming account is a resale target with a card attached, and years of voice and text chat sit behind it. Where a child plays, what leaks is those messages and the age check that proved how old they are.

Your chats are the leak. People type medical worries, legal trouble and work secrets into these tools in the first person, and a transcript in your own words is far harder to explain away than a stolen password.

A government file is the authoritative version of you, and the identifiers in it are the hardest of all to change. It also names the people recorded around you, who never dealt with the department at all.

A diagnosis does not expire and cannot be reissued. Leaked, it reaches employers, insurers and family in a form you cannot deny, and the tracking cases show this data escaping without any breach at all.

A stay record says who you were with and where, and hotel files keep passport numbers to prove it. One group's breach exposed 5.25 million unencrypted passport numbers and ran undetected for four years.

This is the leak that cannot be undone. A verifier holds the passport scan and the face that proves it is yours, and archives of exactly that pairing have leaked before. You cannot reissue your face.

A claims file can hold health details, and shared industry databases mean one leak reaches insurers you never applied to. A diagnosis or a refused claim on that record can shape what you are offered for years.

Case files hold the worst week of someone's life in detail. In one ransomware attack court bundles reached the dark web: medical records, witness statements, and the addresses of witnesses and victims.

A delivery file says where you live, when somebody was home, and where a parcel goes when nobody is. It names the neighbour who takes them in, who never signed up to anything.

A reading history records what you were curious about, and a list of headlines cannot tell curiosity from belief. Your politics, your diagnosis, your faith: all inferred, none declared, and none of it explainable after the fact.

A donor record says what you gave and what you gave it to, which is often a cause you support quietly. One attack on the sector's dominant database exposed donors across thousands of charities at once.

The file here is thin and unusually pointed: who you are, what you asked to have deleted, and the document you sent to prove it. A leak exposes your identity papers beside the fact that you are someone who asks.

A tenancy file holds your income, your bank details, your guarantor and why a landlord said no. Leaked, it gives a stranger the means to pose as you and the reasons a future landlord may refuse you.

A leak hands over your salary history, why you left, and what a referee said about you. It follows you into every future application, and you never see the copy that is circulating.

A purchase history reads like a diary: pregnancy, medication, who you buy for. One retail breach exposed 56.9 million shopper accounts, with purchase histories and dates of birth included.

What leaks is your private messages, your photo library and your contact graph. None of that can be changed afterwards, and it exposes the people around you as much as it exposes you.

What leaks here is rarely dramatic alone: an identifier, a device, a list of apps. It matters because it is the thread that ties the rest together. The pieces are worth little apart and a great deal joined up.

Call records show who you speak to and location shows where you sleep. That pair has already been sold down a chain of buyers and used to track named individuals.

Trip records map where you go and when you are away from home. One operator's breach took riders and drivers alike, and the licence and payment details attached make it a fraud kit too.

A travel file says where you were, when, and who you were with, with the passport or ID number attached. It is enough to place you somewhere you would rather not be placed, long after the trip.

Utility records are how people get found: a name tied to a current address and a payment history. That pairing is where stalking and identity theft start, and it is exactly what these files hold.

What leaks here is your face, your voice, and a machine's judgment of you under pressure, tied to your name and the job you didn't get. A recording is not a password: it cannot be rotated, and neither can what it shows.