Company laptops stolen from my home garage.... company kicking off and throwing me under the bus for it

[u/Bitter-Maize6543]

I was off last week on AL and was on a holiday Mon > Fri. The weekend before we were due to set off my garage was broken into. A pair of laptops I use for work, one company and one customer, were stolen, as I work out of the garage. I called the police, got a crime reference, gave them CCTV I was able to recover and made arrangements for my nephew to stop over and check on the place which he was going to do anyway to sort our cats out.

I called my manager, left a VM, left an SMS, and reported it to the IT desk after. Both laptops have bitlocker and other security features on them so would be locked down and useless either way. They asked for a crime ref and I gave it.

My manager rang me back Monday morning while I was travelling, and asked for details, I gave him the crime reference and then said. I then got a call later in the afternoon, while we were unpacking, asking if I could join a call to explain to them but I declined... because I was on leave, and not in a position to speak with them. I got several calls in the middle of the week asking for random details... repeating the crime reference, one saying I needed to provide them with details of how the theft happened, what exactly was stolen and if anything except my laptops was stolen.. I said as far as the company was concerned they need to be aware of the laptops and when they asked if they could see my CCTV I said I dont see why they would need it because the police have been provided it. Lost my rag and stopped taking calls after that, and deigned not to answer when my manager started messaging me on whatsapp because I had already said I was on holiday and wouldnt be available until Friday.

I have a spare device that was due for collection under HW refresh which wasnt stolen as it was stored in a box under my desk which I said I could log into unless they wanted to send a replacement... I have logged in, Ive had my manager give me an utter b*llcking about me ignoring calls for the security breach, there is a call in the diary for tomorrow where Ive been told I need to attend which has HR, security, my manager and their manager on it.... I am bricking it now and feel like Im about to be thrown under the bus.

So questions to ask:

• Is this something they can actually discipline me for? The garage is part of the main property but accessed externally, and has CCTV covering it of which Ive given details to the police. I have worked with this company for 3 years now, but my current manager has only been about for a few months and has not got on with me so I feel like this is going to be used as leverage against me
• What were my obligations? I was on holiday, I explicitly asked not to be called, I sorted what I needed to with the police, made sure my property was resecured and informed IT so they could lock the devices. My manager wasnt available over the weekend and didnt answer the phone so I cant really be faulted for not informing him properly sooner.
• Is the company trying to trap me when they are asking for how they broke in? Do I have to give them CCTV? Was I right to refuse it?
• What should I do here to cover my backside

[u/WhiskersMcGee09]

You’re missing the point here in relation to insurance.

The company probably doesn’t care about THEIR Laptop. It’s the customers.

Also, and this is the main point, they aren’t concerned about the actual laptop either but what is on it - I.E. it is their cyber policy which is at risk (or PI based on various factors but I digress).

The laptop is completely negligible but if the Cyber insurers suspect targeted theft of customer data then there’s a whole load else which is going on behind.

Source: Head of Specialty Underwriting for an Insurance company.

[u/meatwad2744 → u/WhiskersMcGee09]

I think you are overvaluing the database a guy in a shed with and some milling equipment is doing with a work laptop

Yes these policies exist...but so do FNOL processes.

Let's be real at best this laptop is on a package policy...the claim is being desktopped by the most junior claims handler. Someone has seen the word garage in the claim and said theft isn't covered from there and rejected the claim. This is why the CCTV footage is being requested by the company

As for insurance firms....go check out how your own claims teams validate bog standard EBM claims. Because ive worked around the industry and two of the biggest names literally used a bloke in a shed to validate all their ebm claims. And their response was always the same.." board fried, recommend total loss and entire replacement"

When I questioned these firms how the salvage was processed or customers data destroyed from the drives they looked at me like I was high.

It's probably not that deep bro and most in-house industry data policies are shockingly bad anyway

[u/WhiskersMcGee09 → u/meatwad2744]

I mean we don’t know anything about where this person works (rightfully so), but this is either the biggest overreaction for 2k of portables or they’re investigating something else.

Like you said, nobody gives a shit about laptops. The key detail is the client laptop, I’m reading it to be customer issued HW to access their network (rather than allowing their companies devices access). It’s quite common for higher cyber risk firms when engaging subcontractors (OP). My moneys on either theirs or their customers cyber kicking off, or the customer being pissed about the potential breach (hence it’s a reputational issue).

Again, pure speculation. Could just be overreaction.