This sounds like a lazy (likely contracted) security "officer". Call the company he works for and relay this story. There simply cannot be a policy that does not account for people sharing the same name.

If so, then THAT'S the story here...