Confidentiality risk is the chance that sensitive information will be exposed to people or systems that are not authorized to see it. In security terms, it threatens the confidentiality goal of the CIA triad: data should stay private unless a trusted user, process, or device is allowed to access it.
This risk matters because even a small disclosure can reveal configuration files, source code, credentials, tokens, customer data, or internal paths that help an attacker move deeper. Common causes include file-read bugs, weak access controls, misconfigured storage, and overbroad web-accessible directories. Defenders reduce confidentiality risk with least privilege, strong authentication, careful file placement, patching, and monitoring for unusual reads or downloads. In attacks, the first step is often not data destruction but quiet access to information that should never have been exposed.