A terminated employee shouldn’t be able to access HR PII. I was fired, then given NEW login credentials that let me edit and delegate other employees’ data. How is this system considered secure?
WRITTEN WITH AI using my ideas
I blew the whistle at a multibillion-dollar company. They fired me, sent me NEW login credentials, and I found myself inside their HR system browsing PII of terminated employees. I’m now suing them pro se. Buckle up.
Written with AI because I want this to be clean, factual, and impossible to twist.
I’m in active litigation, so I can’t name certain people yet, but here is the cold, provable truth:
I worked in IT for Delaware North, a huge private company involved in casino operations, gaming infrastructure, state-regulated systems, the whole thing.
I watched chaos:
- untrained people touching casino infrastructure
- unsecured systems
- sensitive files dumped into places they didn’t belong
- no compliance, no controls, no accountability
- I have documentation for 100% of these allegations.
Every year, they forced us to take ethics training.
So I followed it exactly:
Report → escalate → document → warn.
What did I get for it?
Retaliation. Harassment- Termination.
🔥 But here’s where the story leaves "toxic workplace" territory and becomes a full-on scandal.
After firing me, they told the court:
“His access was disabled immediately.”
That is a lie.
They sent me brand new Workday login credentials after termination.
Not reused. Not leftover.
Brand. New. Credentials.
When I logged in, I didn’t see my W-2.
I saw:
- names of terminated employees
- their pay groups
- their locations
- internal employment info
- other workers' PII
- full CSV reports sitting in my Workday queue
And here’s the part they REALLY don’t want a regulator reading:
👉 I could delegate roles.
👉 I could edit settings.
👉 I could see notifications meant for HR and leadership.
This was WEEKS after they fired me.
They later claimed it was “inadvertent.”
That is not what it looked like from where I was sitting.
Let me ask the obvious question:
Do ALL terminated employees at this company have the ability to access and edit HR data and see terminated employees?
Because if not, they have some explaining to do.
🔥 The retaliation is documented. And messy.
I reported:
- harassment
- misconduct
- retaliation
- data security failures
- ADA issues
- misuse of casino systems
- compliance failures
What did they do?
They reassigned me to the exact Director I had accused of harassment in multiple HR emails. I was taken away from my supervisor of 5 years with no reasoning.
Then they hired someone younger — never posted the job — and asked me to train him.
I had zero write-ups in six years.
Worked 24/7/365.
Was the person they called at 3 a.m.
Then suddenly I was “the problem.”
Convenient.
🔥 Meanwhile, their casino-related systems were a disaster.
I can’t share the real documents for legal reasons, so I’m posting only a fully redacted format screenshot below.
But regulators already have the originals.
Thousands of player records, years of internal files, and sensitive documents were stored exactly where they should NOT have been.
This wasn’t a one-off.
This was normal.
And when I started reporting it?
The retaliation escalated.
Then they fired me.
Then they gave me fresh access to HR data.
You tell me what that looks like.
🔥 I’m now suing them pro se.
Nobody wants to go up against this company.
More than one person told me privately:
“Be careful. They’re powerful.”
Well, so am I — because I kept receipts.
Timestamps. Emails. Workday screenshots.
Internal files. Meeting records.
A 4GB archive.
Everything.
I downloaded it while employed – had access and no security flags were raised. Do you see a security failure pattern?
🔥 Below are three safe images that show the STRUCTURE, not the content.
IMAGE 1 — Workday termination notification + access
Shows that they sent me Workday credentials after firing me and I accessed data that absolutely should NOT be visible to a terminated worker.
IMAGE 2 — Workday “Alert to Terminated Workers” notice
Their attempt to cover the breach that happened in 2026! This is well after I emailed Delaware North security and their defense team to let them know of the security hole. I saved the email.
“Oops, you got those in error.”
IMAGE 3 — Completely redacted casino report (FORMAT ONLY)
No names. No data.
Just the format of the kind of files that were left sitting around.
🔥 This post is the safe**, public version. The real story is a lot worse.**
I can’t post everything — yet.
But regulators across multiple states have full evidence.
More will follow when the litigation allows.
If this gets traction, I’ll post updates.
Trust me:
This is not a workplace dispute.
This is a systems failure, a compliance failure, and a retaliation case wrapped into one.
And it never should have happened.
Posted Feb 28, 2026, 1:17 PM UTC