How to find why users are getting access to records they are not supposed to see in Salesforce?

1. Switch to Classic.

2. Click Sharing button.

3. Click Expand List button.

4. Find the user.

5. Click "Why?" before User name.