A data leak happens when someone from within the organization inadvertently exposes confidential data. It is often the result of outdated systems, poor password policies, stolen or lost devices, and software vulnerabilities.