If the token vault mapping original data to tokens is compromised, tokenized data can be exposed. Other risks include weakness in random token generation and the inability to rotate tokens.