HARTFORD, Conn. (AP) — Despite an ongoing criminal investigation by federal and local authorities, officials from Connecticut’s health insurance exchange said Thursday they believe a call center employee mistakenly left behind a backpack containing clients’ personal information and had no intent to misuse the information.

“It was a very bad decision,” Virginia Lamb, Access Health CT’s legal counsel, told members of the health insurance exchange’s board of directors. “But so far, at least, we have not seen evidence of criminality. The investigation is ongoing. It appears, at this time, that it is a mistake and something we’re going to have to dive into even more deeply. But this was not a massive IT security breach.”