A sales employee's laptop is stolen from a parked car. The device contained an unencrypted spreadsheet with customer names, addresses, and credit card numbers. During the incident review, the security team is asked which principle of the CIA triad was most directly violated when the thief could read the customer data from the drive. Which principle applies?