Identity Theft: Employers Beware

The Fair and Accurate Credit Transaction Act hold employers responsible.
Any employer whose action or inaction, leads to breach of employee information can be fined by state and federal governments and can be sued in civil court. Class action lawsuits can be brought against employers for both actual and punitive damages.