I suspect someone has access to LO's office PC and used external storage, i.e. thumbdrive, to copy out all her photo folders. This was done while she stopped working at PA. The rest is history. If her mobile phone was company asset then it was possible to access its content, if so, LO wasn't...