An expense system holds the trail of where a person eats, sleeps, travels, and meets. The trail is held by the card provider, the expense platform, the accountant who reconciles it, and anyone who has touched the system at any point. Each of these is a separate exposure, and the aggregate is more revealing than any single source.
The trail is significant. It shows the hotels of preference, the restaurants of significance, the cities visited and the duration of each stay. For a principal whose other affairs are private, the expense trail is often the most candid record of their movements that exists.
Most of the leak is mundane. Receipts forwarded to assistants. Statements emailed to accountants. Expense exports shared with auditors. Each step expands the set of people who could, if they wanted to, reconstruct a year of the principal's life.
The work here is to understand how the receipt trail is currently handled, to reduce the number of hands it passes through, and to ensure that the systems holding it are themselves to the standard the principal would expect for any other record of their movements.
More from the desk
The cryptocurrency exchange and the KYC record
The banker who leaves, and what they carry
The art dealer leak and the consignment list
The divorce filing and what it exposes
The leaked database and what resurfaces years later
The third-party vendor as the route in