Not just P2P

We recently had a major IT upgrade with the usual churn of contractors. A project folder was set up to share information.

One contractor came in, created a sub-folder in the project folder then dumped just about every piece of personal information he had into it. Names, addresses & phone numbers of everyone he knew. Bank account details, passwords, the whole shebang. All of it was contained in non-password protected spreadsheets.

All available to 100+ people with access to the folder.

Luckily for him I'm not a crook and made him aware of what he'd done. However, I was concerned that someone working on an IT project of this type didn't know this.