Encrypting tenant data with per tenant keys is a good defense against this kind of thing.