I beleive thats the case where the cc employee had their laptop stolen and hadnt been folowing company policy by encrypting the files.