First of all, employees were not being investigated.
Upon the recommendation of my audit committee, a risk assessment was done, as is done everywhere. This includes a physical analysis, and I must add that the last safety officer was very concerned about breaches of confidentiality. I hired a professional who assessed the risks. It cost just a few thousand dollars. He concluded that the institution's reputation was in jeopardy. That is very important. Essentially, that is what happened.