A fellow employee called a national help desk, associated with our employer, identified herself as me, gave them my computer user #, and verified the last 4 digits of my social security # in order to have my password changed on one of many different computer programs at work. There is no financial gain on the particular program she wanted into.
What obligation does my employer have to me, and what discipline for the offender is appropriate and legal?
Thank you