Code that fails to protect sensitive information.