Corporate Investigations · Empire Investigation · Pittsburgh, PA
Insider Threat Investigations
An insider threat doesn't need to steal anything to devastate your organization. An employee who forwards client lists to a competitor before leaving. A disgruntled executive who sabotages a product launch. A network administrator who retains access credentials after termination. A long-tenured employee slowly building a case against the company by documenting every operational irregularity. Insider threats are the most difficult corporate security problem precisely because the threat comes from inside your walls, with legitimate credentials, institutional knowledge, and the trust you've built with them over years.
Empire Investigation LLC has been investigating insider threats in Pittsburgh's corporate environment for over four decades. Our insider threat investigations are designed to detect, document, and contain the damage while building the evidentiary foundation for whatever action — HR, civil, criminal, or regulatory — your situation requires.
Our methodology includes behavioral analysis, covert surveillance, digital footprint investigation, background intelligence, and coordination with your HR and legal teams. We are acutely aware of the employment law implications of insider threat investigations and operate within all applicable legal standards. We advise clients on timing, approach, and communication strategy throughout every engagement.
What This Investigation Covers
- Behavioral risk assessment — identifying escalating patterns before a critical incident
- Workplace violence indicators — credible threats, intimidating conduct, and warning signs
- Threat assessment support for HR, security, and legal teams
- Employee monitoring and documentation of concerning conduct
- Investigation of employees suspected of deliberately sabotaging operations or systems
- Disgruntled employee surveillance and activity monitoring
- Coordination with legal counsel and law enforcement when escalation is required
- Pre-termination intelligence gathering for high-risk separations
When This Service Is Needed
- An employee has made direct or indirect threats against coworkers or leadership
- Behavioral changes in an employee raise concerns about stability or intent
- An employee with sensitive access is suspected of malicious conduct
- HR or security leadership needs documented evidence before taking action
- A high-risk termination is anticipated and pre-separation monitoring is warranted
- Organizational leadership has received a credible threat and needs rapid assessment
Our Approach
We conduct structured, confidential investigations using proven methodologies and professional-grade tools. Every case is scoped carefully, executed with discretion, and focused on delivering actionable, documented results. We coordinate directly with legal counsel and executive leadership when required.
Questions
Frequently Asked Questions
How do I know if I have an insider threat in my company?
Behavioral indicators include: unusual access to systems or data outside the employee's role; downloading or printing large volumes of data; accessing files at unusual hours; expressing hostility toward the company or leadership; financial stress or lifestyle changes inconsistent with salary; known contact with competitors; planning to leave while still in a sensitive role.
What should I do if I suspect an employee is stealing company data?
Preserve your IT logs immediately — do not alter them. Contact Empire Investigation and your legal counsel. Do not confront the employee or revoke access until advised by counsel, as premature action can impair your legal position and trigger retaliatory claims. Investigation first; action when evidence is documented.
Can Empire Investigation work with our IT department on an insider threat case?
Yes. Our field investigation complements your IT team's digital forensics. We conduct the physical surveillance, background research, and behavioral intelligence that your IT team cannot, while they document the digital evidence trail. The combination is typically far stronger than either element alone.
Is monitoring employees for insider threats legal in Pennsylvania?
Workplace monitoring within defined parameters is legal, particularly when employees have been notified of monitoring policies. Covert surveillance in areas with no expectation of privacy (common work areas, parking lots) is lawful. Audio recording requires consent under Pennsylvania law. Empire Investigation operates within all applicable legal standards and advises clients accordingly.
Confidential Inquiry
Request a Confidential Consultation
All inquiries are handled with complete discretion. We work directly with executives, legal counsel, and HR leadership to scope engagements appropriately.
All inquiries handled with complete discretion.