While there are several process and technical solutions to the immdeiate problem, the basic problem of addressing the 'human attitude element' seems to have been missed. Some sort of 'sensitivity training' for employees to show them that while their actions are understandable and perhaps even perceived by them to be the right thing to do, has further, loss-making consequences. Making them feel 'caught' and penalizing them will not solve the potentially larger problem of newer loopholes being found and misused.
