@boag
I guess, use your imagination. it hasn't been explicitly said why he's doing it (maybe it does later, but idk yet). He could be selling clients information. He could be using this incident as a way to gain trust to move up the ladder, etc. etc.
The reason he's able to go about this was:
a) the higher ups want to keep this a secret. If it gets out to the public, then the public would find out that information is being leaked and would no longer go to this company for insurance
b) he's the one in charge of incidents like these. He happens to be in a position where he would be the one assigned to investigating this issue, thereby avoiding suspicion