Based on the investigation, forensic evidence indicated that an unauthorized party exported data from the hospital’s network system to an external cloud storage platform. The network system is separate from the electronic medical record systems that are used for patient care.