A scenario in which sensitive corporate data is leaked by an insider - accidentally or intentionally - through uncontrolled channels. The incident and the response steps are presented in detail - identifying the incident, containing its spread, removing the malware, and restoring systems - offering a practical lens for putting insider-risk governance and end-to-end data-protection measures in place.