A few months back, I was working with someone in Payroll to resolve some paycheck errors that occurred when my employer switched to a new payroll system. As it turns out, hundreds of employees were impacted with paycheck errors. The payroll employee emailed me a spreadsheet with detailed payroll info for tons of these impacted employees, including names, employee ID numbers, paycheck amounts and dates, amount of overpayment/underpayment to the employee and if the discrepancy had been resolved or not.
I’m sure it was an error and the employee in Payroll intended to send me only my own pay documentation, but I highly doubt I’m the only one who received this file. I notified my leadership (who did nothing) and eventually HR (mentioned it while discussing another matter) and they made me delete the file I was emailed, but it doesn’t appear they have any intention of looking into it further or letting the employees know their paycheck info was sent out. With the info in the spreadsheet, one could easily enough reset passwords and access the 401k accounts of these employees. I'm comfortable filing a report with a federal or regulatory agency if need be, but I don’t even know exactly who to report it to, or if there are other, possibly better methods of handling this. The company is a total loss - they only make decisions that protect themselves, they won’t do the right thing themselves. Am I making too big a deal out of this?