Why hack a password when you can get the employee to just tell you.
Because the employee now knows who might have done it.