employee credentials exposed