> If the attacker had physical access to the laptop, that explains. No full disk encryption or alike? Physical access should not be enough to access sensitive

> If the attacker had physical access to the laptop, that explains. No full disk encryption or alike? Physical access should not be enough to access sensitive data, unless you have data unencrypted.