Human Resources desktop was compromised via malware . Desktop contained PII on more than 4500 current and former employees ; the presence of PII was against policy . There is no evidence that the malware or other actions exfiltrated the information . ;