>“I can’t guarantee you that that policy has never been violated,”

4th sentence in the article:

>identifying one case in which an employee used the access to improve sales.

So only violated once...