I dunno what CAD needs to investigate.

Ng was stupid, sure. Argurably she can be disciplined, just as if she filmed and uploaded a crew rest area or part of CX City not open to the public without appropriate permission (although it is not exactly information obtained during her employment, it is still information obtained *as part of* her employment). But not a safety issue.