I agree we should go after that person and the person who he reports to and the person that that person reports to and right up the ladder, and the IT department that doesn't have controls in place to not allow sensitive information to be copied and/or taken.
This is not just about the one person. It's about a total lack of internal controls in our government.