Possible employee theft HELP