Systems and methods for determining that files found on client devices comprise sensitive information

A system for determining that files found on client devices comprise sensitive information, the system comprising:

• a maintaining module, stored in memory, that maintains, on a server, a set of hashes of files that have been classified as sensitive according to a data loss prevention policy;
• a receiving module, stored in memory, that receives, from a client device, a message that includes a hash of a file that was found on the client device;
• a determination module, stored in memory, that determines that the hash of the file that was found on the client device matches the hash of a sensitive file from the set of hashes of files that have been classified as sensitive;
• a conclusion module, stored in memory, that concludes, based on the hash of the file that was found on the client device matching the hash of the sensitive file, that the file that was found on the client device by sensitive information;
• a security module, stored in memory, that:
• performs a security action in response to concluding that the file that was found on the client device by the sensitive information;
• determines, based at least in part on concluding that the file found on the client device comprises the sensitive information, that the client device is a high-importance device that comprises sensitive information;
• increases data loss prevention protections for the client device in response to determining that the client device is a high-value device;
• at least one physical processor configured to execute the maintaining module, the receiving module, the determination module, the conclusion module, and the security module.

A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• maintain, on a server, a set of hashes of files that have been classified as sensitive according to a data loss prevention policy;
• receive, from a client device, a message that includes a hash of a file that was found on the client device;
• determine that the hash of the file that was found on the client device matches the hash of a sensitive file from the set of hashes of files that have been classified as sensitive;
• conclude, based on the hash of the file that was found on the client device matching the hash of the sensitive file, that the file that was found on the client device comprises sensitive information;
• perform a security action in response to concluding that the file that was found on the client device comprises the sensitive information;
• determine, based at least in part on concluding that the file found on the client device comprises the sensitive information, that the client device is a high-importance device that comprises sensitive information;
• increase data loss prevention protections for the client device in response to determining that the client device is a high-value device.