Blog

All Posts Actonic Agile Atlassian Atlassian Best Practices CCPA Cloud Confluence Data Protection and Security Toolkit for Confluence Data Protection and Security Toolkit for Jira Data Security GDPR HIPAA Inline Table Editing IT news Jira Jira reporting JQL JSM Migration OpsGenie Partner Articles Release Notes Report Builder Runs on Atlassian Salesforce Team management Time management Timesheet Builder

Finding IBANs and bank account details in Jira attachments

Zhenya Elfimova • 12. June 2026
Finance and operations teams move money on the strength of documents — invoices, remittance advices, direct-debit mandates, payout spreadsheets — and a lot of those documents end up attached to Jira issues. Every one of them tends to carry an IBAN, a sort code, or an account number. Bank details are…
Read more...

Detecting national ID and passport numbers in Jira attachments

Zhenya Elfimova • 12. June 2026
Identity documents are among the most sensitive things a person can hand over, and service desks ask for them constantly — to verify an account, process a claim, or satisfy a know-your-customer step. The result is predictable: scans of passports, national ID cards, driving licences, and tax numbers…
Read more...

Finding credit card numbers in Jira attachments before PCI-DSS does

Zhenya Elfimova • 12. June 2026
If your organisation handles card payments, there’s a rule you already know: cardholder data is not supposed to live in a general-purpose system like Jira. And yet it does. A customer pastes a screenshot of a payment page into a support ticket. An invoice with a full card number gets attached to…
Read more...

Detecting phone numbers in Jira attachments

Zhenya Elfimova • 11. June 2026
Phone numbers are easy to overlook and easy to leak. They sit in customer spreadsheets, email signatures captured in screenshots, scanned forms, invoices, and contact lists that get attached to tickets and then forgotten. A phone number is personal data, and in bulk it’s a contact database…
Read more...

Finding postal and home addresses hidden in Jira attachments

Zhenya Elfimova • 11. June 2026
A home address is some of the most sensitive personal data you can hold. It places a real person at a real location, and it shows up in Jira more than most teams realise — on scanned delivery notes, signed contracts, invoices, ID documents, and the customer spreadsheets that get attached to support and…
Read more...

Detecting email addresses in Jira attachments – a practical GDPR habit

Zhenya Elfimova • 11. June 2026
An email address is personal data. That single fact turns a lot of routine Jira activity into a quiet compliance question. Every exported customer list, every screenshot of an inbox, every CC-laden message saved as a PDF and attached to a ticket is a small pile of personal data sitting in your issue tracker.…
Read more...

API keys and secrets in Jira: finding the tokens hiding in your tickets

Zhenya Elfimova • 11. June 2026
Secret scanning has become standard practice in source code — most teams now block an AWS key or a private token before it ever reaches a repository. Jira is the gap nobody closed. The same engineers who would never commit a secret to Git will happily paste a Postman screenshot showing a bearer token, attach…
Read more...