A former state employee is under investigation for removing personal records of state lottery winners and lottery employees while he was working at the Texas Lottery Commission. The person worked at the Texas Lottery Commission and then for the Texas Comptroller of Public Accounts, where the information theft was discovered. His name wasn't released, but officials at that agency responded to questions about the matter by referring to an ongoing investigation by Travis County prosecutors. But a spokesman for the comptroller's office confirmed the investigation. "The Comptrollers office is working with the Travis County District Attorneys office on a criminal investigation of a former employee who possessed confidential personal identifying information that was obtained while previously employed at another state agency," said R.J. DeSilva. "It is a felony violation of state law to possess this information without consent." Sources say the electronic data was taken from the Lottery and uncovered by an internal audit at that agency. The employee went on to a job at the comptroller's office, and the problem apparently came to light when he used state computers there to store the data. The auditor's report wasn't immediately available. The Lottery issued a statement acknowledging the investigation for "alleged unauthorized possession of data by a former Texas Lottery Commission employee" and saying the information that was stolen involves "certain TLC employees, certain licensed retailers, and certain prize winners." It's not clear just what information was in the files, but lottery officials said they're sending letters to every "potentially affected parties." One potential twist: The records were breached some time ago the internal audit was apparently completed early this summer and the people whose records were stolen are only now finding out about it. Not all prize winners are on record, but the lottery keeps information on people who win $600 or more for federal tax purposes. And records of employees and retailers potentially includes direct deposit and other banking information.