An employee of a school in Italy had their highly sensitive medical information and labor dispute details exposed to 14 coworkers. The incident occurred when an administrative worker mistakenly uploaded the employee’s court documents onto the ordinary registry of the school’s document management software instead of the restricted, reserved protocol. Consequently, the employee filed a formal warning demanding the removal of the files and lodged a complaint with the Italian Data Protection Authority, which resulted in a regulatory fine of €1,000 for the school.