Sensitive data is information that needs stronger protection because misuse could harm privacy, finances, identity, or security. Common examples include passwords, recovery codes, personal identifiers, payment details, health records, and private business data. Not all data carries the same risk, so organizations classify it to decide what controls are needed.
In cyber security, sensitive data is a primary target because it can be sold, used for account takeover, or leveraged for extortion. Attackers often try to steal it through phishing, malware, misconfigured cloud storage, weak access controls, or insecure backups. Defenders reduce the risk with encryption, least-privilege access, multi-factor authentication, logging, secure deletion, and careful data handling. The goal is to limit who can see the data, where it is stored, and what happens if it is exposed.