Health data hiding in Jira attachments: the PHI problem nobody scans for

Zhenya Elfimova • 15. June 2026
Healthcare organisations and the vendors that serve them increasingly run operations on Atlassian tools — and patient information follows the work. A claim gets a scanned medical form attached. A support ticket includes a screenshot of a patient record. A research project stores spreadsheets of…
Read more

Finding IBANs and bank account details in Jira attachments

Zhenya Elfimova • 12. June 2026
Finance and operations teams move money on the strength of documents — invoices, remittance advices, direct-debit mandates, payout spreadsheets — and a lot of those documents end up attached to Jira issues. Every one of them tends to carry an IBAN, a sort code, or an account number. Bank details are…
Read more

Detecting national ID and passport numbers in Jira attachments

Zhenya Elfimova • 12. June 2026
Identity documents are among the most sensitive things a person can hand over, and service desks ask for them constantly — to verify an account, process a claim, or satisfy a know-your-customer step. The result is predictable: scans of passports, national ID cards, driving licences, and tax numbers…
Read more

Finding credit card numbers in Jira attachments before PCI-DSS does

Zhenya Elfimova • 12. June 2026
If your organisation handles card payments, there’s a rule you already know: cardholder data is not supposed to live in a general-purpose system like Jira. And yet it does. A customer pastes a screenshot of a payment page into a support ticket. An invoice with a full card number gets attached to…
Read more

Detecting phone numbers in Jira attachments

Zhenya Elfimova • 11. June 2026
Phone numbers are easy to overlook and easy to leak. They sit in customer spreadsheets, email signatures captured in screenshots, scanned forms, invoices, and contact lists that get attached to tickets and then forgotten. A phone number is personal data, and in bulk it’s a contact database…
Read more

Finding postal and home addresses hidden in Jira attachments

Zhenya Elfimova • 11. June 2026
A home address is some of the most sensitive personal data you can hold. It places a real person at a real location, and it shows up in Jira more than most teams realise — on scanned delivery notes, signed contracts, invoices, ID documents, and the customer spreadsheets that get attached to support and…
Read more

Detecting email addresses in Jira attachments – a practical GDPR habit

Zhenya Elfimova • 11. June 2026
An email address is personal data. That single fact turns a lot of routine Jira activity into a quiet compliance question. Every exported customer list, every screenshot of an inbox, every CC-laden message saved as a PDF and attached to a ticket is a small pile of personal data sitting in your issue tracker.…
Read more