The USB key was used to transfer the data from a government office to a service firm reviewing Covid19 related benefit claims and fund distribution. The employee mistake was to not delete data from USB key after transferring to the firm's system.