The trouble usually starts at 3 a.m. An on-call engineer jumps into production to chase a bug, cracks open a database, and suddenly dozens of sensitive columns—emails, tokens, maybe customer card fragments—scroll past their screen. Nobody meant for that to happen, but the damage is done. This