People talk about leaking company CONFIDENTIAL information. It is not just a word slipped from your mouth to blame your staff but a proper management system to formalize it.
You have to rethink:
– Do you have an information classification policies?
– Does your information carry any classification marking? And if no marking, what is the default classification? No classification label should never be regarded as CONFIDENTIAL.
– Are you holding information that is also available from other sources or publicly known?
– Have you provided training or orientation to raise the staff awareness the proper handling of company information?
If you don’t have any one of these, it’s the fault of your company but not your staff.