HELLFIRE Silly question time: if it was only an "email environment", what were driver's licences, credit card numbers and other more sensitive PII doing there? Do people routinely send these things via e-mail, especially if they're aware that it will be stored in an externally-accessible system, on someone else's servers?