i work for a large corporation

it is drilled into us, we CAN NEVER throw out ANY information that is sensitive. NONE. EVER. we MUST dispose of it in shredder bins. that has been the case for MANY years. recently, they even went a step further. we have a 'clear desk' policy. when we are away from our desks for more than an hour OR when we leave, we MUST lock our computer screens (in my department we all have laptops and docking stations. those docking stations are locked all of the time the laptops are in them) and we MUST have all sensitive information off of our desks. we even have a laminated piece of paper which states we're gone for the day and if you are going to leave something on the desk, seek out the person's supervisor and give that document to them, do NOT leave it on an open desk. mind you, we have a LOCKED building. it's impossible to get into unless you have a key card. during normal business hours, the front doors are unlocked, but there are security guards at the front desk. you can't get past them without setting off an alarm. (the guards are there 24/7 by the way). we even have some revolving doors at other entrances where you need the key card to gain entrance. those doors are so sensitive, they will back you out if they think there are TWO of you in one compartment (it has a scanner in it. i once tried to get back in after a smoke and i was reading. i had the papers out in front of me. the door, WHICH EFFING TALKS, told me i was a bad bad bad grrrl and it backed me out).
seems to me, people's bank is the one at fault here
Taking bank trash, Fairfield man claims security lapse
BRIDGEPORT, Conn.—A Fairfield man who claims security lapses after taking bank documents from trash bins is headed to court on civil charges that he violated a restraining order won by the bank.
more stories like this
For four months, James Hastings searched through trash bins outside People's United Bank branches in Fairfield County. He pulled out bags of paperwork with private information, including customers' Social Security numbers and account information.
The bank last month won a restraining order against Hastings, 56, requiring him to not discuss the matter or distribute paperwork. He has since been interviewed by the Connecticut Post.
People's Bank said Hastings is trying to extort money and claims he asked to be hired as a "fraud consultant." Bank officials also are demanding that the information be returned.
Brent DiGiorgio, a spokesman for People's Bank, said its primary concern is protecting the customers' information that Hastings has taken. The bank promises to provide a year of free credit monitoring to customers whose information was taken and has contacted affected customers, he said.
People's trains employees abut safeguarding customer information and the bank is reviewing its policies, DiGiorgio said.........