Risk heatmap
Files are ranked by severity, volume, and variety of detected exposure.
profile.json6 finding(s) · Email, Government ID, Payment card, Phone, Postal address100
review-notes.txt4 finding(s) · Credential / token, Payment card, Postal address100
contact-register.xlsx5 finding(s) · Author metadata, Email, Payment card, Phone75
contacts.csv6 finding(s) · Email, Phone, Postal address72
disclosure-brief.docx4 finding(s) · Author metadata, Email, Postal address47
field-photo.jpg4 finding(s) · Author metadata, Email, GPS location47
Masked findings
Locations are precise enough to fix the source. Values are never retained in full.
| File | Location | Category | Risk | Masked fragment | Repeat group |
|---|---|---|---|---|---|
contact-register.xlsx | office metadata · creator | Author metadata | Medium | A•••••••••h | — |
contact-register.xlsx | office metadata · lastModifiedBy | Author metadata | Medium | M•••••••••e | dup-001 |
contact-register.xlsx | sheet Synthetic contacts · B2 · line 1, column 1 | Medium | a•••@e•••.com | dup-002 | |
contact-register.xlsx | sheet Synthetic contacts · B3 · line 1, column 1 | Phone | Medium | •••-•••-0147 | dup-004 |
contact-register.xlsx | sheet Synthetic contacts · B4 · line 1, column 1 | Payment card | Critical | •••• •••• •••• 1111 | dup-003 |
contacts.csv | table · row 2, column 2 · line 1, column 1 | Medium | a•••@e•••.com | dup-002 | |
contacts.csv | table · row 2, column 3 · line 1, column 1 | Phone | Medium | •••-•••-0147 | dup-004 |
contacts.csv | table · row 2, column 4 · line 1, column 1 | Postal address | High | 184…[street detail hidden] | dup-005 |
contacts.csv | table · row 3, column 2 · line 1, column 1 | Medium | m•••@e•••.net | — | |
contacts.csv | table · row 3, column 3 · line 1, column 1 | Phone | Medium | •••-•••-0188 | — |
contacts.csv | table · row 3, column 4 · line 1, column 1 | Postal address | High | 22 …[street detail hidden] | — |
disclosure-brief.docx | Word content · word/document.xml · line 1, column 78 | Postal address | High | 184…[street detail hidden] | — |
disclosure-brief.docx | office metadata · creator | Author metadata | Medium | A••••••••••••m | — |
disclosure-brief.docx | office metadata · creator · line 1, column 15 | Medium | a•••@e•••.com | dup-002 | |
disclosure-brief.docx | office metadata · lastModifiedBy | Author metadata | Medium | M•••••••••e | dup-001 |
field-photo.jpg | EXIF · Artist | Author metadata | Medium | A••••••••••••e | — |
field-photo.jpg | EXIF · Copyright | Author metadata | Medium | C••••••••••••e | — |
field-photo.jpg | EXIF · GPSInfo | GPS location | High | [precise location hidden] | — |
field-photo.jpg | EXIF · ImageDescription · line 1, column 19 | Medium | a•••@e•••.com | dup-002 | |
profile.json | $.export_notes.address · line 1, column 1 | Postal address | High | 184…[street detail hidden] | dup-005 |
profile.json | $.profile.china_id_style · line 1, column 1 | Government ID | Critical | 99••••••••••••18 | — |
profile.json | $.profile.china_id_style · line 1, column 1 | Payment card | Critical | •••• •••• •••• 0018 | — |
profile.json | $.profile.email · line 1, column 1 | Medium | a•••@e•••.com | dup-002 | |
profile.json | $.profile.government_id · line 1, column 1 | Government ID | Critical | 89•••••••56 | — |
profile.json | $.profile.phone · line 1, column 1 | Phone | Medium | •••-•••-0147 | dup-004 |
review-notes.txt | text · line 4, column 18 | Credential / token | Critical | AKIA••••••••••••MPLE | — |
review-notes.txt | text · line 5, column 16 | Credential / token | Critical | ghp_••••••••••••0000 | — |
review-notes.txt | text · line 6, column 13 | Payment card | Critical | •••• •••• •••• 1111 | dup-003 |
review-notes.txt | text · line 6, column 18 | Postal address | High | 111…[street detail hidden] | — |
Repeated exposure chains
The same sensitive value appearing in separate files creates extra cleanup paths.
M•••••••••econtact-register.xlsx → disclosure-brief.docx
a•••@e•••.comcontact-register.xlsx → contacts.csv → disclosure-brief.docx → field-photo.jpg → profile.json
•••• •••• •••• 1111contact-register.xlsx → review-notes.txt
•••-•••-0147contact-register.xlsx → contacts.csv → profile.json
184…[street detail hidden]contacts.csv → profile.json
Cleanup sequence
Actions are ordered by likely harm and number of affected files.
Escalate payment-data exposure
Remove card data and follow the applicable payment incident and retention procedure.
Remove government identifiers
Move originals to approved restricted storage and create a disclosure copy without the identifier.
Rotate exposed credentials first
Revoke each credential, verify recent use, then replace the source value with a clearly non-working synthetic marker.
Break repeated exposure chains
Start with the canonical source, then remove or regenerate every duplicate copy listed in the exposure groups.
Generalize street-level addresses
Keep only the city or region required for the recipient's task.
Strip precise image locations
Remove GPS EXIF before sharing and confirm that exported thumbnails do not retain it.
Replace personal email addresses
Use role aliases or synthetic addresses in examples and public export packages.
Clean document authorship metadata
Clear creator, last-modified-by, and comment metadata before publishing.
Remove direct phone numbers
Keep direct numbers only in the smallest access-controlled source set.