My HR dept leaked some data to a scammer, take any action or ignore?
4 comments
This should be told to management. That same HR person might be in cahoots with the scammer?? It also exposes a flaw that if exploited at a high level could scam all the cash in their accounts = all lose jobs.
This exploit exposed a foolish employee as well as an untrained one. In a case like this, escalation should have been done by the HR person.
Report it. CC your manager, theirs manager, persons from HR manager, head of HR and someone from finance. Your company also should have DPO and fraud departament - they should also be CCed.
It’s not about snitching, it’s about ensuring that processes are reviewed, historical data is reviewed, and ensured nothing similar has happened or is about to happen.
It’s not about snitching, it’s about ensuring that processes are reviewed, historical data is reviewed, and ensured nothing similar has happened or is about to happen.
OK thanks for sharing your thoughts! Much appreciated.
For now I reported to my direct manager and the HR manager, asking what HR's follow up actions are going to be (suggesting process review / staff refresher on processes, and reporting to fraud department). I expect they may want to keep this small, but let's see.
A big multinational should have a fraud dept. immediately inform them of this incident as well as your direct manager.
HR tells me they'll transfer the salary 'soon', so I'll be kind to them and give them a couple of days.
What makes me feel bad particularly, is the data related to myself that leaked to this scammer in the process.
What would you do? Simply express how uncomfortable I am with that and forget?
I don't want to 'punish' the HR person that eventually made the mistake. But I also am upset that they leaked this data.