This management advisory is to alert the U.S. Department of the Interior (DOI) to an incident we discovered in which a DOI employee unnecessarily shared a spreadsheet containing the personally identifiable information (PII) of 182 employees from a number of DOI bureaus.
During a recent investigation, we learned that the DOI employee created the spreadsheet for use in internal training and then emailed it to a group of from several DOI bureaus. Because the group members all got the same spreadsheet, they were able to access the PII of employees in DOI bureaus outside their own.