Failure to properly protect sensitive data such as financial, healthcare, or PII.
MITRE. (n.d.). Common Weakness Enumeration (CWE).