millions of account data is regularly exposed to the public due to inadequate data storage.
monitors data leaked in this way for the presence of client data in them
Critical services, such as banking, are well protected from leaks, but people often use the same credentials for several services. So a database leak of a small forum can reveal authentication data from users' corporate resources.
In half of the cases, the cause of the leak is not intent, but just indiscretion, server misconfiguration, lack of authentication, etc.
list of databases from various services like shodan censys etc
content of these databases for the presence of sensitive data in them
client in case his indicators
(ip, domains) were noticed