Two former employees misappropriated information in violation of the firm’s IT security and data protection policies, and shared it with a media outlet, the Maine’s Attorney General office stated.