Software that is incorrectly configured can lead to the exposure of sensitive information. For example, unnecessary functions may still be enabled, such as backup functions that inadvertently synchronise data to a cloud. This could result in sensitive data being viewed and disclosed by unauthorised third parties.

The possible consequences include financial losses and damage to an organisation's reputation. In addition, the organisation could find itself in violation of applicable laws (e.g. by disclosing personal data).