1. A computer program product, embodied on a non-transitory computer readable medium, for performing operations comprising: determining whether a first event including a first communication of data satisfies a predefined rule; scoring the first event to produce a first result based on at least one of a social security number, an account number, a birthdate, a name, and an account name included in the first event; identifying a second event based on an identifier of the first event and an identifier of the second event, wherein the second event includes a second communication of data separate from the first communication of data; scoring the second event to produce a second result based on at least one of a social security number, an account number, a birthdate, a name, and an account name included in the second event; determining whether an aggregate score of the first and second results exceeds a threshold indicated in the predefined rule, in response to a determination that a time between an identification of the first event and the identifying the second event is within a temporal proximity; and performing a reaction in response to a determination that the aggregate score of the first and second results exceeds the threshold indicated in the predefined rule.