Spent some time last week with an IT consultant. I’ll have more information on that next week. In the meantime, one of the suggestions is that you should consider limiting what employees can access via the internet on company computers or networks.
One suggestion is to not allow personal use of Facebook via the company computers or networks. He had a client whose network was brought down as a result of an employee viewing her Facebook page. The result was 8 hours work to rebuild the network as a result of a virus downloaded via clicking on something on Facebook.
As I have said many times, your business data is your #1 asset. Be sure to protect it. Consider limiting this kind of access via any device that touches your business data.