It always starts the same way. Someone jumps into production to check a query, promising, “I’ll just look.” Two minutes later, they are staring at raw patient data in clear text. Logs are capturing everything, including the fields no one should ever see. Now the compliance team is panicking