A former employee only recently discovered that she had taken sensitive data with her by mistake when she left the company in 2010.