The CERT secure coding guidelines categorise an attacker gaining access to private data via [swap](https://www.securecoding.cert.org/confluence/display/seccode/MEM06-C.+Ensure+that+sensitive+data+is+not+written+out+to+disk) and ["reusable resources"](https://www.securecoding.cert.org/confluence/display/seccode/MEM03-C.+Clear+sensitive+information+stored+in+reusable+resources) as "unlikely" and "Low severity, unlikely, expensive to repair."