Don't muck about mate. If you have even the slightest suspicion that one or more of their employees is using/passing on card details whilst people are deployed, then report it to the [U]civil[U] police immediately. At the minimum, it should force P to look at security.