Real organizations.
Real data. Real risk.
Every assessment tells a story. These are some of ours — anonymized findings from Data & More privacy data risk assessments and data assessments across sectors and geographies.
Multi-Entity Oil & Gas Group
1.9% of the data estate assessed — yet $527K in direct risk found and $27.4M extrapolated. Only 4.5% of Exchange mailboxes are AI-ready. Travel and health data account for 57% of all privacy risk.
Canadian Education Sector Union
130,786 privacy items found across 21.3 million profiled items. 95% of all privacy data is non-compliant. The Top 25 accounts alone represent $8.9M in risk — a clear Phase 1 target.
Enterprise Professional Services Firm
A 1,200-user North American professional services firm discovered $7.2M in unmanaged data risk across 13.3 TB of Microsoft 365 data — concentrated in workflows they already understood, with privacy data occurring in 0.079% of 52.7M items scanned.
Canadian Credit Union
A 15-user pilot uncovered $2.25M in direct risk from member identity data — including 235 super-toxic documents each exposing 25 or more individuals. Full environment extrapolation points to significantly greater exposure.
Real Estate Platform Provider
Only 0.3% of the total data estate assessed. $29,756 in direct risk found — but 10.3 TB in Amazon S3 remains untouched. Recruitment data accounts for 70% of privacy risk. 107 internal data subjects identified.
Small Canadian Municipality
A PoC covering 39 of approximately 200 staff (19.5%) found $827K in direct risk — extrapolating to ~$4.25M across the full organisation. 595 community members exposed. 12 super-toxic documents identified as immediate remediation targets.
North American Construction Firm
A full 227-user Microsoft 365 assessment — covering all mailboxes, OneDrive locations, and 59 SharePoint site collections — found $1.05M in direct risk with recruiting data driving the majority of privacy exposure.
Large Architecture Firm
A 28-user pilot covering just 0.7% of a large architecture firm’s M365 environment surfaced $520K in direct risk dominated by health data — with years of retained records compounding the exposure far beyond the assessed scope.
See what a Data & More assessment
would find in your environment.
Assessments take weeks, not months. The findings give you the complete, evidence-based picture your team needs to act.