We dont give email password to the employees. If they compromise their personal email its their problem. But users report to us first. One of our customer website was asking for microsoft login to access their web page. May be their website got compromised.