Sensitive information including personal data, account credentials and intellectual property are frequently targeted and stolen by threat actors during cyber incidents. Sensitive data lost in breaches can affect notification obligations, and can lead to fines, lawsuits and other types of harm. To quantify the impact of a data breach and the risk to affected organisations and individuals, it is important to quickly and efficiently identify high-risk data in compromised accounts and exfiltrated datasets.