Former HR employee (compensation) exfiltrated data to their personal email address. data included first and last name , SIN numbers of ministry employees. No evidence of wrongdoing yet but it raises questions of gross incompetence coming from the ministry in charge of preventing data loss.