Employees are a bigger threat to company data than hackers