On February 17 , 2012 , our client , Washington University in St. Louis discovered that an employee was copying electronic files onto an external hard drive . While the employee was authorized to see the data in these files , they were not authorized to copy the first onto an external drive that he brought to the office . The information contained names , SSNs , addresses , and DOB . ;