We spent a long time poring through old human resource and patient records. The boxes had been marked "To be Destroyed," but it seems they never got around to it. About a million 'Personally Identifiable Information Privacy Policy' violations here for someone to get yelled at for.