Sally has unknowingly shared contact details of various clients and also revealed sensitive non public information.

Such information are not meant to be shared beyond her organization.

This is a violation of PII rules and likely a violation of business confidentiality clauses that are common among companies.