📱 The accidental exposure

Excessive data exposure

You're checking Twitter during your morning coffee when you see a security researcher has tagged your company.

The tweet shows a screenshot of your mobile app's error message with 1,200 retweets and climbing.

The error message displays your complete database schema, server IP addresses, AWS credentials, and admin login details.

Comments are already discussing potential attack vectors, and competitors are taking screenshots.

Technical Issue: Your mobile app shows detailed error messages in production that include sensitive system information. When database queries fail, the full stack trace with credentials and internal details gets displayed to users.

What's your immediate first move?

Push an emergency app update to fix error messages

Deploy a hotfix to hide sensitive information in error messages

Immediately rotate all exposed credentials

Change passwords, API keys, and database access shown in the error

Monitor for signs of actual attacks

Watch your systems for anyone trying to exploit the exposed information

Post a response minimising the security risk

Try to calm the situation by saying it's not a real threat

← Select different scenario