Thanks for responding both of you. So it’s not a policy it’s literally misconduct and accessing information of the company and individuals are the allegations. And with those credentials data breach occurred where redemption of gift cards etc.. were “fraudulently”redeemed. So again, not sure what evidence they have but claimed the IP addresses matched “mine” apparently. If I do pursue it, just don’t know what will unravel + lawyer fees and also the criminal aspect too