The employee photographed the documents with a smartphone without permission and emailed a summary of the contents to 16 colleagues in February 2025.