To me it's bizarre that a contractor wasn't logging their hours in the first place, so it sounds more like fixing their earlier mistake rather than something malicious.