Shortly after replacing outdated equipment, Alex, the system administrator, discovered a leak of critical customer information. Among the stolen data was new user information, which rules out improper disposal of old equipment. The IDS did not detect the intrusion, and the logging system indicates that valid credentials were used. What is most likely the cause of this issue?