An unauthorized third party potentially removed data that includes employee information and records tied to a limited number of other individuals.