An administrative assistant at an Enterprise Rent-A-Car in the U.K. was fined 1,000 pounds for selling customers’ records, according to a report by the Law Society Gazette. Sindy Nagra sold almost 28,000 customers’ records for 5,000 pounds.

Nagra was also ordered by the Isleworth Crown Court to pay 100 pounds as a victim surcharge and 864.40 pounds in prosecution costs, according to the report.

Nagra was responsible for processing customer details that were sent to the car rental company from an insurance company, says the report. Enterprise contacted the Information Commissioner’s Office after its systems showed Nagra looking at a large amount of customer records, many that she wasn’t expected to process.

Nagra pleaded guilty to unlawfully obtaining, disclosing and selling personal data. This is a criminal offense under section 55 of the Data Protection Act, according to the report.

Click here for the full Law Society Gazette report.