The idea is that the organization members might also be leaking sensitive information unknowingly as they work for the organization.