Social engineering holds clue to security leaks: expert