Failures related to cryptography that expose sensitive data: weak or missing encryption, broken algorithms, poor key management, cleartext transmission.