Two questions I'd have expected the article to answer:

(a) how did they identify the employee, and (b) how come they weren't sent to jail