The best way to protect against data leaks is not storing data.
Hackers can't steal what you aren't storing.
If you're developing an application, always ask "do I need to be storing this data? If so, how long do I need to store it for?"
https://www.404media.co/hackers-steal-text-and-call-records-of-nearly-all-at-t-customers/