A data leak is a disclosure of confidential data through a security hole to an exterior entity. It does not have to be malicious.