Finding credit card numbers in Jira attachments before PCI-DSS does

Zhenya Elfimova • 12. June 2026
If your organisation handles card payments, there’s a rule you already know: cardholder data is not supposed to live in a general-purpose system like Jira. And yet it does. A customer pastes a screenshot of a payment page into a support ticket. An invoice with a full card number gets attached to…
Read more

Detecting phone numbers in Jira attachments

Zhenya Elfimova • 11. June 2026
Phone numbers are easy to overlook and easy to leak. They sit in customer spreadsheets, email signatures captured in screenshots, scanned forms, invoices, and contact lists that get attached to tickets and then forgotten. A phone number is personal data, and in bulk it’s a contact database…
Read more

Finding postal and home addresses hidden in Jira attachments

Zhenya Elfimova • 11. June 2026
A home address is some of the most sensitive personal data you can hold. It places a real person at a real location, and it shows up in Jira more than most teams realise — on scanned delivery notes, signed contracts, invoices, ID documents, and the customer spreadsheets that get attached to support and…
Read more

Detecting email addresses in Jira attachments – a practical GDPR habit

Zhenya Elfimova • 11. June 2026
An email address is personal data. That single fact turns a lot of routine Jira activity into a quiet compliance question. Every exported customer list, every screenshot of an inbox, every CC-laden message saved as a PDF and attached to a ticket is a small pile of personal data sitting in your issue tracker.…
Read more

API keys and secrets in Jira: finding the tokens hiding in your tickets

Zhenya Elfimova • 11. June 2026
Secret scanning has become standard practice in source code — most teams now block an AWS key or a private token before it ever reaches a repository. Jira is the gap nobody closed. The same engineers who would never commit a secret to Git will happily paste a Postman screenshot showing a bearer token, attach…
Read more

Finding passwords and credentials hidden in your Jira attachments

Zhenya Elfimova • 11. June 2026
Credentials end up in Jira far more often than anyone likes to admit. A developer pastes a connection string into a comment while debugging. A support agent attaches a screenshot of a login screen “for context.” An ops engineer drops a config file onto a ticket so a colleague can reproduce…
Read more

Your service desk is a PII goldmine your malware scan can’t see

Zhenya Elfimova • 10. June 2026
Jira Service Management runs on uploads. Customers attach screenshots of errors, photos of ID documents, exported statements, and PDFs of forms — often containing exactly the personal data you’re obligated to protect. Teams reasonably worry about malware in those uploads, and Jira malware…
Read more