When confidential information appears in the media, reaches competitors, or surfaces anonymously online, organizations often focus on identifying the source. In this Compliance Week article (1 October 2026), Matt Flegg examines how modern investigations use digital evidence, forensic analysis, and artificial intelligence to reconstruct how information moved and who may have accessed it. He also explains why organizations should first assess whether a disclosure may be linked to credible whistleblowing concerns before pursuing attribution, highlighting the legal, regulatory, and reputational risks of focusing solely on the messenger.
The article also explores the growing role of AI in both investigations and leak risk. While AI can accelerate the review of emails, documents, chat messages, and system records, it cannot determine intent, assess motivations, or distinguish whistleblowing from misconduct without human judgment. Matt emphasizes that effective leak management requires more than investigative capability alone, combining strong governance, trusted reporting mechanisms, AI controls, and experienced oversight to address both deliberate and inadvertent disclosures in an increasingly complex digital environment.
Read the Compliance Week article.