Patent ID: 8874528

Claim:
A computer-implemented method for detecting cloud-based data leaks, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a relational database stored on a third-party storage service, wherein the relational database: comprises a plurality of tuples related by an attribute designated for storing contact information; is accessible, via the third-party storage service, to at least: an owner of the relational database; at least one authorized party who is authorized by the owner of the relational database to access at least a portion of the relational database via the third-party storage service; adding at least one deceptive tuple representing an illegitimate contact and comprising known false contact information stored under the attribute to the relational database; maintaining a data repository identifying the deceptive tuple as containing false contact information; identifying a contact attempt performed by an attempted use of the known false contact information; in response to identifying the contact attempt: determining, based on the data repository identifying the deceptive tuple as containing false contact information, whether the authorized party had access to the deceptive tuple; determining that the authorized party is not implicated in a cloud-based data leak if the authorized party did not have access to the deceptive tuple; determining that the authorized party is implicated in a cloud-based data leak if the authorized party had access to the deceptive tuple.