Dover Federal Credit Union notified members that an employee transferred files containing personal information (name, address, account number, SSN) to a personal Dropbox account for business purposes. The incident was discovered on September 20, 2016. Investigation concluded it was unlikely unauthorized persons accessed the data. The credit union updated security controls and offered identity protection services.