HR Confidential: I hired him without performing a background check. Then he stole his colleagues' identities
In the second installment of CNBC Make It's new series HR Confidential, a New York-based human resources professional with nearly 30 years of experience tells Ruth Umoh about the consequences of not performing a background check on a temp employee.
The below is told in the HR pro's own words, and has been edited for length and clarity.
The scenario:
I was a senior HR manager at a foreign banking company. An employee came to my office and informed me that someone had stolen his identity and applied for credit cards in his name. I took down a report but didn't think anything of it because I oversaw payroll and other sensitive information.
It wasn't out of the ordinary for employees to notify me about changes to their banking information or if their bank account had been compromised. That way, I could make sure there were no issues with their deposits.
But a week later, another employee came to me with the same problem and my red flag went up. By the third employee, I knew something was happening. I realized we had an internal problem because it's too coincidental for three employees to have identity theft within a three-week span.
My staff and I tried to figure out what was going on but we were getting nowhere.
The solution:
After a few weeks, we hired an investigative company that specializes in fraud. They came to my office and requested the name, photo and address of everyone who has ever touched our employee files and I gave them a list of 15 to 20 people. One week later, they came back with the postmaster general and postal police officers who were armed with guns. They sat down, placed the list in front of me, pointed to a name and asked, "Who's this person?"
I responded, "Oh, he's a temp in our file room." They said, "Bring him in." I brought him into my office and the guy's in handcuffs in less than five minutes. I couldn't believe it. I was in shock.
The guy was a temp employee who we had hired through an outside agency to work in our file room. When you have 3,000 employees, their personal files quickly pile up so we hired him to clean up each person's file, add information to them and put them away. However, he was going into these files, taking people's social security numbers and stealing all of their information.
The post office already had the guy under investigation for other credit card fraud that was linked to a particular address. Therefore, when they saw his name on our list, they were able to easily nail him.
When he came into my office, he initially denied that he was the culprit. However, he eventually admitted that his friend talked him into stealing his colleagues' information. He and his friend were stupid enough to fraudulently sign up for credit cards and got them sent to their home address. That address was the one that the postmaster spotted on our list.
For the employees who had their identity stolen, this was such a nightmare. It took some of them more than a year to get this solved. I also felt somewhat responsible because I'm the one who hired the temp and this happened under my watch. I did the best I could in providing support.
As a company, we did feel obligated to offer help and paid the service fees to help them clean up their records. I felt terrible. This went on for months for them. Luckily, they didn't sue us or anything but it was a mess.
The lesson:
The first lesson here is this: Quickly determine when something is outside of your element and know when it's time to get help. Doing an investigation of employee theft was outside of my staff's expertise. Even though it cost us about $5,000 to hire the investigative company, it saved us time that would otherwise have been wasted. You need to know when you've reached your limit and when to outsource things.
The second lesson is to always perform background checks for temp employees (just like you would for a full-time employee), especially if the person is handling sensitive information.
In fact, performing background checks for temp workers is even more important because they aren't invested in the company and, as a result, pose more of a risk.
However, a background check only uncovers criminal convictions, so criminal activity like this guy being under investigation by the post master general would not have shown up in a background check. Even so, a background check may have revealed if he had a criminal record and, possibly, arrest records as well. It's not foolproof, but it helps.
Companies generally do background checks on staff employees but they forget about the temps or assume that the temp agency they're hiring from has already vetted them. Don't take that risk. Background checks are only about $150, so do it just to be safe.
After this fiasco, we changed our hiring strategy and restricted access to confidential information because you really have to protect employee records. We became very careful about who touches them, who handles them and how they're stored.
HR Confidential is a new series focusing on the issues HR managers face and their most memorable workplace stories. If you'd like to tell your story, email makeitcasting@nbcuni.com.
Like this story? Like CNBC Make It on Facebook.
Don't miss: HR Confidential: I fired her. Then she revealed all the sordid sex and drug use happening under my nose