...am sure that their auditing department (IT Budget) is spending a ton of money on DLP technology (data loss prevention) and trying hard to audit everything that is accessed and copied elsewhere. I bet they run Splunk, Checkpoint DLP agents, and have endpoint encryption on their servers, desktops, and laptops...up the wazoo - and go through detailed audit logs on their internal infrastructure to see who accessed what, and when.
and yet, the leaks continue.