I personally think this unethical access to personal info in databases happens all the time on private and public citizens by employees who have computer access to same, out of curiosity, as a favor for their friends, wanting to know about their neighbors, bribes, anything.
How do we have any guarantee or knowledge that is doesn't happen?
I worked for Social Security for about a year and if you accessed a file that you had no right to see you were fired and could possibly face criminal charges. It was zero tolerance policy unless it happened accidentally which was possible. This lady had intent and that is why she needs to be fired.