A former employee of the Office of the Comptroller of the Currency downloaded 10,000 records onto thumb drives before his retirement in November 2015. The security breach was only detected last month after a routine security assessment. The OCC deemed the breach a major incident because the devices containing the information are not recoverable. The stolen information was encrypted. There was no evidence that suggests that the former employee has publicly disclosed the data neither he has misused it nor has disclosed it.”]