The employees of the city of Amarillo, Texas, had their personal information compromised when an outside contractor conducting an audit lost a USB drive containing their data.

The contractor was conducting a required external audit of the city’s payroll when one of its workers lost an encrypted USB drive that contained the PII which included employees’ names, addresses, bank deposit information, dates of birth, and social security numbers, according to MyHighPlains.com. The flash drive most likely disappeared between November 9-13 and while the local police are investigating the city believes it was an accident.

Since the drive is encrypted it is unlikely the information can be accessed, but the city has informed its workers of the breach and the contractor is offering one year of identity theft protection.