Why is it that the documents provided for the journalist's use were still publically accessible months after the journalist had confirmed receipt? That's a good

Why is it that the documents provided for the journalist's use were still publically accessible months after the journalist had confirmed receipt? That's a good question for starters, as it's possible the journalist could have later been hacked and lost control the password, had his laptop stolen in an apartment burglary, or any number of other legit accidents. Proper INFOSEC involves not leaving information where it doesn't need to be for any longer than it needs to be there, encrypted or not.