A due diligence report is a document that gathers and assesses information about a person, organization, or transaction to support a decision. Depending on its purpose, it may include identity details, business history, affiliations, or other background information. Because it can combine sensitive data in one place, it should be treated as a high-value record.
In cyber security, these reports can be targeted for theft or exposed through excessive access, weak storage controls, or unsafe sharing. Criminals may misuse the information for identity fraud, impersonation, extortion, or tailored phishing. Defenses include limiting access to people with a clear need, protecting files with encryption, controlling exports and sharing, and deleting records when retention is no longer necessary. A claim that such reports were leaked is not, by itself, proof that authentic files were obtained or disclosed.