That's a particularly bad offense for a software engineer. Wouldn't want to be in a meeting having to explain why I hired them if they mishandled data/access again.