Four things I would check first with NestJS if a bank's API kept leaking sensitive data

A bank's API rarely leaks sensitive data on purpose. Nobody writes a line of code that says send the customer's full account number to anyone who asks. It happens in smaller, quieter ways, a response ...