A site engineer wants to work from home, so he emails the control room drawings to his personal account. Nobody marked them as sensitive, so nothing stops him.
It got out
The back alley's bill so far: 128 weeks · See the bill
I show how The Glasshouse is controlled: its doors, its cameras, its screens and its speakers. Not everyone should be able to see me. Somebody has to decide who can.
The wrong way
On Monday he forwards them to a mate at another firm, for "a second opinion".
The drawings turn up on a hackers' forum. Two hooded figures, grinning at a laptop.
The engineer tells his supervisor. The supervisor tells nobody. Nobody tells the client.
Every screen in the mall shows the same message, and the speakers read it out on repeat. Thousands of shoppers have a very unusual morning.
The client hears it from the shoppers first. Every sensitive drawing is reissued and the controls re-secured.
Marcus (client's project manager): When were you going to tell us?
The drawings got out in a day. Nobody said a word. On opening day, someone else was running the building.
+6 weeks on the back alley's bill: Sensitive drawings with no gate round them: every sensitive drawing reissued and the controls re-secured.