Forum Discussion

sumo83's avatar
sumo83
Iron Contributor
Jun 26, 2025
Solved

Search for Credit Card Numbers within tenant

Hello all,   for audit purposes, I need to discover if there are any PAN/Credit Card numbers stored anywhere within our tenant - we use M365 E3/E5 (Sharepoint, onedrive, exchange online).   I'm s...
  • vicwingsing's avatar
    Jun 26, 2025

    You are in the right path:

    Using eDiscovery, you can use the Content search function. Once content search finishes searching for information > you can export a report that contains details (there is a limit of 2TB for the exported file)
    Exporting data from Content Search: https://learn.microsoft.com/en-us/purview/ediscovery-export-search-results 

    Additionally, you can create a DLP policy that points inwards. You're DLP policy would have the following in the rules: 
    Policy is for SharePoint and OneDrive
       Rule: IF data contains Sensitive Information Type (1) PAN or (2) CCN then trigger. Recommended to change the confidence level to High. No action taken
           Run policy: Simulation/ Audit mode. So that it doesn't change or affect anything in your org. 

    Another option:
    In Content explorer, there is an SIT section, you'll get ALL (and I do mean ALL) data that matches PAN and CCN. You can export this list too in excel. Then you can use excel to count.

Resources