Like many things in the shadowy world of cyber-crime, an insider threat is something very few people have experience of.