A security analyst discovers that several employees in the marketing department have been using personal cloud storage accounts to share large campaign files with external contractors, bypassing the company's approved file transfer system. The IT department was not aware of these services being used. Which type of threat actor does this scenario represent?