With companies now having to disclose and data breaches we're much more aware of the successful attacks. No doubt the unsuccessful attacks are unlikely to be mentioned, for obvious reasons of security.

I was reviewing a few datasets in the last week and it seemed obvious to me that some of the data captured is not worth keeping, even if its value is low. However, the data, if stolen, would help bad actors build profiles of the individuals and businesses.

I also discovered a few places where the data was stored in fairly obvious locations. BTW, I didn't set it up that way, someone else did. That is no longer the case and it's location is now obfuscated.

Finally, I discovered too many unused apps/services that were used during the development process and were left on the server. Those superfluous apps/services are now gone.

Any other tips on securing data?