A flash drive was found by an unaffiliated person containing sensitive Godiva information . The person who found it contacted the company through a lawyer and returned the drive . Forensics confirm the drive was accessed on April 2 , 2013 . Further investigation indicates that a former employee , acting within the scope of their duties , had compiled employment data on this flash drive . The employee then lost the drive . ;