A junior RBC employee, Ibrahim El-Hakim, exploited his legitimate access to breach client records, including those of then-Prime Minister Mark Carney. Recruited via Telegram by a contact linked to organized crime ('AI WORLD'), El-Hakim allegedly opened fraudulent accounts, trafficked client identification numbers, and participated in a $68,500 credit line fraud scheme. While RBC detected the breach and terminated the employee, the incident escalated into a national security concern due to the high-profile target. Surveillance logs captured El-Hakim’s actions—accessing accounts, creating credit lines, and viewing sensitive data—but RBC’s partial monitoring failed to prevent or immediately flag the misuse. The case highlights systemic gaps in least-privilege access controls and real-time oversight, compounded by the overlap between organized crime and potential state-sponsored threats. Charges include fraud, unauthorized computer use, and trafficking personal data for fraudulent purposes. The RCMP’s national security unit took over due to the prime minister’s involvement, though no direct physical threat was confirmed.