The commission recently released two reports of entities abusing their credentials to access private documents.