Sensitive Data Exposure

• Unknowingly exposes sensitive data, which can be accidental or through unauthorised access - a confidentiality breach 
• Has a security incident which results in the unauthorised or accidental alteration of sensitive data - an integrity breach 
• Has a security incident which leads to the temporary or permanent unauthorised or accidental loss of access to, or destruction of sensitive data - an availability breach 

• Data sent over HTTP instead of HTTPS.
• Passwords stored in plain text.
• Weak or outdated encryption (e.g: using MD5 or SHA-1) instead use: bcrypt, scrypt, or Argon2 & salt.
• Data leakage via verbose error messages, logs, or browser storage.

❌ Insecure: storing plaintext password

user_data = {
    "username": "aiman",
    "password": "mysecretpassword"
}

✅ Secure: hash + salt the password

import bcrypt, hashlib

password = "mysecretpassword"
salt = bcrypt.gensalt()
hashed = bcrypt.hashpw(password, salt)

username = "aiman"
hashed_username = hashlib.sha256(username.encode()).hexdigest()