When you understand what data you have and where it lies, you can set about determining which of it is actually necessary. It’s easy for scope creep to result in businesses holding on to information long after it is no longer directly useful to operations – but this does not mean it will not be of interest to hackers, especially if it contains valuable personal data.

Source: BlackFog