Sensitive records are data items that could create privacy, legal, or fraud risk if exposed. They often include employee files, customer information, identity documents, contracts, payment details, and internal legal or financial records. The sensitivity comes from context: even a small set of records can be harmful if it can identify a person, reveal confidential business operations, or support impersonation.
In cyber security, sensitive records matter because they are high-value targets for theft, extortion, and secondary abuse. Attackers may steal them to sell on underground markets, pressure a victim with public leak threats, or use them for identity fraud and social engineering. Defenders reduce this risk by classifying data, limiting access, encrypting storage, separating critical datasets, and monitoring for unusual export or exfiltration activity. Protecting sensitive records is often as important as stopping the intrusion itself.