■Case 2
Mr. Y, an employee of our Company, has been communicating via email with Ms. Z, who works for another division
of our Company. In the course of their email exchange, Ms. Z cc’ed a representative of Company C, a customer of
our Company, with the intention of sharing information. However, Ms. Z did not explicitly tell Mr. Y that she added
an email address belonging to a person outside the company in the cc field of their emails.
Mr. Y sent Ms. Z a return email that contained confidential internal information. Mr. Y failed to notice that the
representative of Company C was cc’ed in his email.
At later date, Mr. Y was informed by Ms. Z that the representative of Company C told Ms. Z that Mr. Y’s email had
contained the confidential information belonging to our Company.