I have a case involved Ex- HR staff (WT) and current employees (CE). I joined my current company 3 months after the ex-HR staff left.

WT knows the sequence of the email setting (inclusive user name and password) for all staff in my current company. We were informed by a staff that he knew lot of current information of the company. By instinct, we started to track trail of web-mail logged in record  to my email account and Group GM email account. We found the both our emails were logged in by someone from a some source (same domain).  We start to fish for more info and record of his logged in activities and the messengers information from our current staff. We gathered all information and evidences then a police report has been made.

Here come to interesting part, as a humanity approach we called WT to the office and inquiry his motive of doing so. He presented the record of the whatsapp group which involved of 2 our our current employees, CE. Some of the message information were as below: 

WT: ( Information such staff resigned, company activities cancelled (which only made known to HOD)... have been revealed by WT to the staff in the whatsapp group

CE to WT:  besides this, any breaking news update?

WT to CE: (company information were being updated whenever he got to know from the email)

CE to WT: WT u really need to standby for us..U are our advisor now!

.......

the question is the company wants to dismiss the CE staff involved, and was advised that the DI has to be carried out.

Please do anyone advise me on what charges we can raise from this case?

i.e misconduct by willfully approaching 3rd party to gain company 1st hand information

breach of obligation to inform company WT knows what happening in the company.

what is the next action to be taken?

One of the CE is manager.

Thank you