protecting against social engineering after data leak