Sensitive data exposure is when an app (either by its own flaw or by an attacker’s abuse of a vulnerability) reveals a user’s private data (e.g., credit card numbers) to an unauthorized third party.