Joe, a security analyst employed by an organization, has discovered a critical vulnerability within the organization's LAN. This vulnerability grants him access to financial and personal information belonging to other employees. However, instead of immediately reporting the vulnerability, Joe spends two days examining the exposed information out of personal curiosity. He does not disclose any information to third parties or other internal employees during this time. In this case, what would be an appropriate term to describe Joe?