Failures in protecting data through cryptographic means. This includes insufficient encryption, improper use of cryptographic algorithms, and weak key management, exposing sensitive data to theft or tampering.