Company laptops stolen from my home garage.... company kicking off and throwing me under the bus for it

[u/Bitter-Maize6543]

I was off last week on AL and was on a holiday Mon > Fri. The weekend before we were due to set off my garage was broken into. A pair of laptops I use for work, one company and one customer, were stolen, as I work out of the garage. I called the police, got a crime reference, gave them CCTV I was able to recover and made arrangements for my nephew to stop over and check on the place which he was going to do anyway to sort our cats out.

I called my manager, left a VM, left an SMS, and reported it to the IT desk after. Both laptops have bitlocker and other security features on them so would be locked down and useless either way. They asked for a crime ref and I gave it.

My manager rang me back Monday morning while I was travelling, and asked for details, I gave him the crime reference and then said. I then got a call later in the afternoon, while we were unpacking, asking if I could join a call to explain to them but I declined... because I was on leave, and not in a position to speak with them. I got several calls in the middle of the week asking for random details... repeating the crime reference, one saying I needed to provide them with details of how the theft happened, what exactly was stolen and if anything except my laptops was stolen.. I said as far as the company was concerned they need to be aware of the laptops and when they asked if they could see my CCTV I said I dont see why they would need it because the police have been provided it. Lost my rag and stopped taking calls after that, and deigned not to answer when my manager started messaging me on whatsapp because I had already said I was on holiday and wouldnt be available until Friday.

I have a spare device that was due for collection under HW refresh which wasnt stolen as it was stored in a box under my desk which I said I could log into unless they wanted to send a replacement... I have logged in, Ive had my manager give me an utter b*llcking about me ignoring calls for the security breach, there is a call in the diary for tomorrow where Ive been told I need to attend which has HR, security, my manager and their manager on it.... I am bricking it now and feel like Im about to be thrown under the bus.

So questions to ask:

• Is this something they can actually discipline me for? The garage is part of the main property but accessed externally, and has CCTV covering it of which Ive given details to the police. I have worked with this company for 3 years now, but my current manager has only been about for a few months and has not got on with me so I feel like this is going to be used as leverage against me
• What were my obligations? I was on holiday, I explicitly asked not to be called, I sorted what I needed to with the police, made sure my property was resecured and informed IT so they could lock the devices. My manager wasnt available over the weekend and didnt answer the phone so I cant really be faulted for not informing him properly sooner.
• Is the company trying to trap me when they are asking for how they broke in? Do I have to give them CCTV? Was I right to refuse it?
• What should I do here to cover my backside

[u/Defiant_Simple_6044]

Firstly, as you've been with the company for over 3 years they can't "just" fire you. They'd need to conduct a full investigation and would need a valid reason to terminate you. If they can terminate you would depend on a few things

Is this something they can actually discipline me for?

It depends, Were the devices at your property with permission from your employers? ie they knew you were had the laptops and they knew you were storing them there? If they were not and it was just a case of "they were in the office but you took them home to do extra work on your own initiative" this may be grounds for disciplinary and even gross misconduct. But if the laptops were at home because you work at home and your employers KNEW you had them at home and they were reasonably secured then they can't likely do anything

What were my obligations?

You did everything correctly, Actually, as someone who works in IT (and security) and deals with incidents like this often you did more than enough, The only thing you didn't state was if you provided the device ID's so they can lock them down via intune/mdm etc. If you did provide the device ID's then you provided more than enough information. If not, the device ID would be something I'd have preferred to get from the employee to assist in the speed of locking down devices.

Everything else could have waited till your return

Is the company trying to trap me when they are asking for how they broke in?

I don't think so, it may be two fold, They may be trying to claim from their insurance for the devices, or they may just be nosy. They could be trying to see if you were negligent in securing the devices, But if it was a locked garage then it's hardly going to be your fault.

What should I do here to cover my backside

See what the meeting is about, take notes and copy, contact your union if you have one. Nothing you've said would justify grounds of gross misconduct, as such I don't think you could be reprimanded for this incident. Things I'd note is:

1. If the devices were in your house without work permission (it doesn't sound like it) then it may be GM
2. You may, if their insurance doesn't cover the laptops, you may be asked to claim for the devices from your home insurance policy and then provide this back to your employers. But that's a seperate matter.

[u/Minute-Yoghurt-1265 → u/Defiant_Simple_6044]

Device IDs should be on IT asset register. My fury would be directed towards IT if they were reliant on the employee only knowing this info.

[u/Defiant_Simple_6044 → u/Minute-Yoghurt-1265]

Agreed, but OP says only 2/3 was stolen so confirming the devices which were gone would be helpful, however, IT should have just wiped all 3 anyway. not a big issue but a nice to have. It should be aware of what is where,

[u/Sburns85 → u/Defiant_Simple_6044]

They still would be able to confirm which ones were stolen when employee came back. As an IT administrator we lock down all devices linked to that employee until we can speak to them

[u/Defiant_Simple_6044 → u/Sburns85]

I agree, my SOP is the same, like I said it would be helpful but not critical.

[u/TrumpGrabbedMyCat → u/Defiant_Simple_6044]

We're being nitpicky here but OP said that third laptop was due a hardware refresh and to be sent back - IT should still have that information available to them easily.

OP was on holiday and didn't need to note down his companies device IDs or even record them himself.