[galangalalgol]

I'm with you on asking why that data was even on a removable drive. What possible use case is there for that? And if there is one, like transferring between airgapped networks, it seems you'd encrypt it at least.

[akg_67]

The USB key was used to transfer the data from a government office to a service firm reviewing Covid19 related benefit claims and fund distribution. The employee mistake was to not delete data from USB key after transferring to the firm's system.

[IncRnd]

The data was planted on the usb by an Evil Maid[1], so the salaryman could gain face [2] as an everyman.

[1] https://en.wikipedia.org/wiki/Evil_maid_attack

[2] https://en.wikipedia.org/wiki/Face_(sociological_concept)