On or about September 16 , 2013 , a RailWorks corporate employee separated from the company . It is possible that , between December 2012 and September 2013 , the employee in question may have had access to employee personal information , including name , social security number , financial account and/or credit card numbers . ;