Data leakage investigation is a forensic process against unauthorized data disclosure or data loss. The aim is to identify what data was leaked and how it was leaked. Such process involves steps like identifying involved IT assets, analyzing data flow, containing the leak, determining the root cause, assessing risks, restoring security and preventing future data loss incidents.