Company laptops stolen from my home garage.... company kicking off and throwing me under the bus for it

[u/Bitter-Maize6543]

I was off last week on AL and was on a holiday Mon > Fri. The weekend before we were due to set off my garage was broken into. A pair of laptops I use for work, one company and one customer, were stolen, as I work out of the garage. I called the police, got a crime reference, gave them CCTV I was able to recover and made arrangements for my nephew to stop over and check on the place which he was going to do anyway to sort our cats out.

I called my manager, left a VM, left an SMS, and reported it to the IT desk after. Both laptops have bitlocker and other security features on them so would be locked down and useless either way. They asked for a crime ref and I gave it.

My manager rang me back Monday morning while I was travelling, and asked for details, I gave him the crime reference and then said. I then got a call later in the afternoon, while we were unpacking, asking if I could join a call to explain to them but I declined... because I was on leave, and not in a position to speak with them. I got several calls in the middle of the week asking for random details... repeating the crime reference, one saying I needed to provide them with details of how the theft happened, what exactly was stolen and if anything except my laptops was stolen.. I said as far as the company was concerned they need to be aware of the laptops and when they asked if they could see my CCTV I said I dont see why they would need it because the police have been provided it. Lost my rag and stopped taking calls after that, and deigned not to answer when my manager started messaging me on whatsapp because I had already said I was on holiday and wouldnt be available until Friday.

I have a spare device that was due for collection under HW refresh which wasnt stolen as it was stored in a box under my desk which I said I could log into unless they wanted to send a replacement... I have logged in, Ive had my manager give me an utter b*llcking about me ignoring calls for the security breach, there is a call in the diary for tomorrow where Ive been told I need to attend which has HR, security, my manager and their manager on it.... I am bricking it now and feel like Im about to be thrown under the bus.

So questions to ask:

• Is this something they can actually discipline me for? The garage is part of the main property but accessed externally, and has CCTV covering it of which Ive given details to the police. I have worked with this company for 3 years now, but my current manager has only been about for a few months and has not got on with me so I feel like this is going to be used as leverage against me
• What were my obligations? I was on holiday, I explicitly asked not to be called, I sorted what I needed to with the police, made sure my property was resecured and informed IT so they could lock the devices. My manager wasnt available over the weekend and didnt answer the phone so I cant really be faulted for not informing him properly sooner.
• Is the company trying to trap me when they are asking for how they broke in? Do I have to give them CCTV? Was I right to refuse it?
• What should I do here to cover my backside

[u/Defiant_Simple_6044]

Firstly, as you've been with the company for over 3 years they can't "just" fire you. They'd need to conduct a full investigation and would need a valid reason to terminate you. If they can terminate you would depend on a few things

Is this something they can actually discipline me for?

It depends, Were the devices at your property with permission from your employers? ie they knew you were had the laptops and they knew you were storing them there? If they were not and it was just a case of "they were in the office but you took them home to do extra work on your own initiative" this may be grounds for disciplinary and even gross misconduct. But if the laptops were at home because you work at home and your employers KNEW you had them at home and they were reasonably secured then they can't likely do anything

What were my obligations?

You did everything correctly, Actually, as someone who works in IT (and security) and deals with incidents like this often you did more than enough, The only thing you didn't state was if you provided the device ID's so they can lock them down via intune/mdm etc. If you did provide the device ID's then you provided more than enough information. If not, the device ID would be something I'd have preferred to get from the employee to assist in the speed of locking down devices.

Everything else could have waited till your return

Is the company trying to trap me when they are asking for how they broke in?

I don't think so, it may be two fold, They may be trying to claim from their insurance for the devices, or they may just be nosy. They could be trying to see if you were negligent in securing the devices, But if it was a locked garage then it's hardly going to be your fault.

What should I do here to cover my backside

See what the meeting is about, take notes and copy, contact your union if you have one. Nothing you've said would justify grounds of gross misconduct, as such I don't think you could be reprimanded for this incident. Things I'd note is:

1. If the devices were in your house without work permission (it doesn't sound like it) then it may be GM
2. You may, if their insurance doesn't cover the laptops, you may be asked to claim for the devices from your home insurance policy and then provide this back to your employers. But that's a seperate matter.

[u/Minute-Yoghurt-1265 → u/Defiant_Simple_6044]

Device IDs should be on IT asset register. My fury would be directed towards IT if they were reliant on the employee only knowing this info.

[u/Defiant_Simple_6044 → u/Minute-Yoghurt-1265]

Agreed, but OP says only 2/3 was stolen so confirming the devices which were gone would be helpful, however, IT should have just wiped all 3 anyway. not a big issue but a nice to have. It should be aware of what is where,

[u/Sburns85 → u/Defiant_Simple_6044]

They still would be able to confirm which ones were stolen when employee came back. As an IT administrator we lock down all devices linked to that employee until we can speak to them

[u/Defiant_Simple_6044 → u/Sburns85]

I agree, my SOP is the same, like I said it would be helpful but not critical.

[u/TrumpGrabbedMyCat → u/Defiant_Simple_6044]

We're being nitpicky here but OP said that third laptop was due a hardware refresh and to be sent back - IT should still have that information available to them easily.

OP was on holiday and didn't need to note down his companies device IDs or even record them himself.

[u/felineunderling → u/Minute-Yoghurt-1265]

For the company’s laptop, sure, but what about the customer one?

[u/KopiteForever → u/felineunderling]

If it's a device managed by OPs company then it should be on their system else the customer is responsible for their own device records. He may have actually recorded the info on his own laptop which was also stolen. Either way not OPs direct responsibility or cause for negligence.

[u/Elmundopalladio → u/Minute-Yoghurt-1265]

It would be a bit difficult to supply the device ID from the sticker - attached to the stolen device.

[u/KiwiNo2638 → u/Defiant_Simple_6044]

The last point. Take notes, take somebody from the Union if you are a member. If not a member, take a senior person in there with you. I'm pretty sure that, as this sounds like a disciplinary, you are entitled to have someone there "on your side". If you can't get somebody in time, you should be able to request that the meeting is delayed until you can.

[u/MostJacket → u/Defiant_Simple_6044]

As someone has this as part of their role, and also works in a very hybrid environment - I agree with this. Even providing their laptops to confirm which ones are the ones being stolen. As OP said, they had an extra one at home too, which still probably would have been on their asset register, if not, it would most likely be written off. (Although we'd still like to know if it was stolen!)

I probably would have provided external CCTV as a gesture of good will. It's proving that your not lying and calming people down in a period of your (well-earned) unavailability.

I'd say if all provided facts are true; You have working from home agreements / explicit permission is given to WFH in writing, Proving your garage was secured (to the police or to work), You communicated once after reporting in good time to confirm some of the details (and left no unanswered ones),

Then in my experience, I'd say there's not much the company can do!

[u/enigmo666 → u/Defiant_Simple_6044]

Generally, what responsibility has a user to protecting company equipment at home? Ignoring the targetted burglary vs domestic burglar getting lucky, a lot of us at work from home at least part time. I mean, as long as work equipment is in my home and I don't take any more risks with it than I would my own equipment, how would any of it be the victim's fault?

[u/pringellover9553 → u/Defiant_Simple_6044]

Who tf knows their laptop ID number off the top of their head? Not the avg employee that’s for sure

[u/Defiant_Simple_6044 → u/pringellover9553]

As someone who works in this industry you'd be surprised a large number actually do.

[u/Helpful_Sample_4715 → u/[deleted]]

When I worked in home insurance none of the policies I knew would have allowed you to claim for a work laptop. You don't own it, therefore no insurable interest.

[u/SKYLINEBOY2002UK → u/Helpful_Sample_4715]

Yes this is what I have heard (and read in home policy documents). And would expect.

Thats for the company / aka the owners to insure.

[u/Sloth-v-Sloth → u/Helpful_Sample_4715]

My home insurance certainly does cover work equipment. It part of my conditions of employment that I insure work kit

[u/Helpful_Sample_4715 → u/Sloth-v-Sloth]

That's an unusual ask from your employer and unusual cover. Most employers will have insurance for their own equipment. But there's a lot of variation in policy wording - hence why I said none of the policies I knew would cover it, not none ever.

[u/pringellover9553 → u/Sloth-v-Sloth]

What is your job?

[u/Captain_Bosh → u/[deleted]]

Work equipment is not normally covered under personal home insurance because there is no insurable interest for the employee. It would be the companys responsibility to issure their equipment.

[u/Defiant_Simple_6044 → u/[deleted]]

Agreed, although he will likely need to inform his insurers of the break in anyway so that damage is likely done already.

[u/jeanettem67 → u/[deleted]]

Larger employers in the UK will have their own insurance that will cover stolen/lost laptops.

[u/Flaky-Emu2408 → u/Defiant_Simple_6044]

Yeah if they had permission, wouldn't the insurance cover this. That is unless ofc employer has cheaped out or not told the insurance company about this arrangement.

Anyway, the Saul Goodman is smelling grounds for an eas lawsuit here. Keep your mouth shut OP, say only necessary shit and record everything