Maybe you should have a re-think again about what are your most valuable asset to your business.. Once identified, build parameters to protect these assets.
In this case, you have failed to identify "Mary" was one of your key assets, and yet, you have failed to protect these assets and made her...