An employee used an outdated internal portal to submit a confidential report. This portal does not use HTTPS encryption. Our cybersecurity team captured the network traffic at the exact moment the "Submit" button was pressed. The administrator suspects that sensitive personal information was transmitted in plain text within the request body.