To prevent recurrence of such an incident, the company subsequently took steps to further strengthen its personal information management processes, including implementing additional restrictions on access to such information, reinforcing log-in access procedures, and stepping up regular checks and other monitoring measures.