Poor network security -- unless they hacked their way in.
Neither. When I worked for a state tax commission, I had access to all tax records. What I didn't have the authority to do, however, was look up tax records on a whim, not even my own. They tracked all access, and if it didn't align with your schedule of work, you had some explaining to do.