The problem may be as simple as an employee or consultant sending information to Dropbox, but placing it in a public folder by mistake, for example.

FORBES: Find The Data Lurking In Your Company's Digital Shadow