Client confidentiality is the duty to protect sensitive client records from unauthorized access, disclosure, or misuse. In cybersecurity, it applies to information such as legal files, financial documents, medical records, identity data, and private communications. Protecting confidentiality is critical because a breach can expose personal details, weaken trust, and create regulatory or legal consequences.
In real attacks, confidentiality is often threatened when attackers steal data from email systems, shared drives, document repositories, or case-management platforms, then threaten to publish it for extortion. Defenders reduce that risk with least-privilege access, strong authentication, encryption, logging, secure backups, and data loss prevention controls. Regular review of who can read, copy, or share files is especially important where a single leaked document can reveal information about many clients.


