I believe that you can prosecute the culprits. It would be a theft of information akin to identity theft and a crime analagous to invasion of privacy. I believe that you could contact the police and press charges for this event. I suggest working with your employer so that they find the person because for a variety of reasons they may not want the police involved. If your employer does not assist you in this, you do have the legal right, in my opinion, to contact the police. Again, please discuss this with your employer first. I hope I have answered your questions.
I hope that I have helped, answered all of your questions, and that I have provided you with useful information. Please contact me if I have not answered all of your questions. If my answer is satisfactory please accept it. I really appreciate positive feedback.
In the future, you can specifically request that I work with you on your legal question. If you have specifically requested that I answer this question, thank you.
Please be aware that my answer is not legal advice, it is merely information. You and I have not entered into an attorney/client relationship. The only way that I am legally responsible for your legal rights is if you have signed a written retainer agreement with my law firm.