We kept seeing leaked PII into test data. Here’s...

We accidentally committed real user emails into test fixtures. More than once. Not because we didn’t know better—but because the system allowed it. Why this keeps happening If you’re working with real data pipelines, this is pretty easy to fall into: someone copies production data “just for testing” CSV fixtures get reused across environments test data slowly drifts toward real data over time everyone assumes someone else cleaned it Nothing malicious—just normal workflow shortcuts. What didn’t w