A measurement computer was stolen overseas. Security measures to prevent an information leak (encryption and user authentication) had not been implemented for the computer in question, which contained customer data unrelated to the measurement project underway. A supervisor had approved the removal of the computer from company premises, but the supervisor failed to check what data had been stored on the computer. The extent of the impact was significant, making it extremely difficult to deal with.