Inadequate Security Policies and Enforcement

This incident suggests a potential lapse in company policies regarding data encryption or insufficient enforcement of existing security measures for portable devices.