Sensitive Data in Logs incident response playbook · Cybersecurity Atlas
Sensitive Data in Logs
HighData ProtectionA09:2021 – Security Logging and Monitoring Failures
Passwords, tokens, card numbers, or personal data are written to application logs and then copied into log platforms, tickets, and backups that many more people can read.
Immediate Response
1Rotate any credentials, tokens, or keys found in logs.
2Restrict access to the affected log indexes.
3Purge or redact the affected log entries and archives where possible.
4Assess whether the exposure is a reportable personal data breach.
