Data leakage occurs when an employee or customer accidentally or unintentionally shares private information, either at rest or in transit, thereby making it available and accessible to bad actors.