## 1 Introduction  
Data leakage severely threatens the operations of enterprises, including private corporations and government agencies. The loss of sensitive information can result in substantial reputational damage and financial losses and jeopardize the long-term stability of an organization. Commonly leaked data include employee and customer information, intellectual property, and confidential medical records. Recently, numerous high-profile data breaches have cost companies billions of dollars [1]. This trend has been further amplified by the rapid growth of data in the digital age, making data leaks more frequent than ever, particularly with the rise of Industry 4.0. As an illustration of the scale of cybersecurity threats, in January 2024, 26 billion records were exposed, marking it as the largest known data breach, termed the Mother of All Breaches (MOAB). This breach comprised 12 TB of data leaked from platforms such as LinkedIn, Twitter, Weibo, and Tencent [2]. Thus, preventing the unauthorized disclosure of sensitive information has become a critical security concern for enterprises. Confidential information breach represents a data breach, and, as defined by the Code of Federal Regulations, it entails loss, theft, or unauthorized access to data containing sensitive personal information, whether in electronic or printed format, posing a potential threat to the confidentiality and integrity of the data. As stated by Privacy Rights Clearing-house (PRC) (privacyrights.org/data-breates accessed on 7 April 2024), in 2021 there were 2266 reported data breaches in the United States alone, leading to the compromise of a total of 93,824,801 records. For each of these records, the Personal Identifiable Information (PII) exposed may have represented a physical-safety or financial concern for the data subjects. Moreover, companies may suffer financial losses as a consequence of direct costs (e.g., sales disruption, stock price drop, extortion payments) and indirect costs (e.g., reputational damage, reduced credit rating, system downtime) [3]. Indeed, data protection is such a relevant concern that numerous laws and regulations have been enacted worldwide to address it. Furthermore, depending on the data type a company stores, it may be compelled to comply with specific regulations, as outlined by [PERSON] and [PERSON] [4]. Hence, to improve customer privacy, prevent financial losses, and ensure compliance with relevant regulations, companies must make strategic investments in cybersecurity and deploy security measures that adeptly mitigate the risks linked to data breaches. It is, however, critical to do so in a planned and managed manner to optimize the allocation of resources. This optimization must establish a relationship between specific metrics within the dataset and key cybersecurity features, including governance, risk and compliance, as well as impacts and vulnerability mitigation [5]. Additionally, further analysis of the dataset is conducted to contribute to the understanding of the interrelationship between the risk of data breach and the attributes of the affected company. In the age of big data, data assumes a key role in a company's core operations, as the effective analysis of vast data volumes offers a substantial competitive edge to corporations. However, this advantage is closely associated with an elevated risk of loss or theft of sensitive and valuable data. Thus, safeguarding against data leakage presents a challenge for businesses, thereby raising significant security concerns. The process of storing, using, sharing, and analyzing escalating data quantities leads to an upsurge in potential vectors for data leakage. These vectors encompass a wide spectrum of avenues, such as cloud file sharing, email, web pages, instant messaging, FTP (File Transfer Protocol), removable media and storage, database and file system vulnerabilities, camera incursions, laptop theft, lost or stolen backups, and vulnerabilities associated with social networks.