Why Information Was Taken

I accessed internal systems without authorisation and copied customer data. The people harmed were account holders whose information was removed without consent. I concealed the access by using an existing user profile assigned to my role and keeping activity within normal hours. Logs existed but were not reviewed. I stored the data externally and benefited financially by selling aggregated lists. I remained employed and retained access until the department restructured. The breach was later attributed to a generic security incident and closed without identifying me.