Would be funny cause the I.P for 300 fakes would be from the one doing the legit one 😂, Chasing an I.P would be just pointless, told them time and time again, 1 login code linked to each employee number, sent out, tesco nothing to do with it, only from the other side... No way of manipulation and then can chase up those who haven't with algorithms if need be as each is checked off if they really wanted everyone / as many to do it as possible....
Since it would be an outside company, they can just keep all the employee details anonymous anyhow.. Would still be more secure than tesco cr*p