A national bank client calls you and says that an internal auditor employee, who has signed stringent confidentiality and non-disclosure agreements, has provided highly confidential bank and customer documents and information to the SEC and other government enforcement agencies. He also sent these documents to the New York Times, which publishes an article about your client, causing its share value to drop 30 percent.
For good measure, the auditor sent files including customer Social Security numbers to his mother (for safekeeping), uses his girlfriend’s computer to access confidential company documents, deletes hundreds of confidential files from his company-issued laptop, and uses his personal Gmail account to email confidential company information to his Gmail address.
