A forensic check later revealed that an external device had been on the company's system to extract data, and a proxy server ...