Premeditated data breaches like this are covered under the boilerplate language in your employment contract -- "sharing data with our partners" and other such nonsense.