Bottom Line Up Front
Employee theft cases in St. Mary’s County rarely begin with a deputy at the door. They begin with a CPA or auditor finding discrepancies, a manager noticing missing inventory, or an automated system flagging unusual transactions. The employer investigates internally, often for weeks or months, then confronts the employee in an HR meeting. By the time charges are filed, the employer has already built a substantial paper case and may have obtained a confession during the HR confrontation. The single most important moment in many of these cases is the HR meeting itself: what the employee says, what they sign, and whether they had counsel before they walked into the room.
St. Mary’s County’s economy supports a wide range of employers vulnerable to internal theft: retail operations along the Route 235 corridor, restaurants and bars in Lexington Park and California, professional offices in Leonardtown, contractors and subcontractors at Naval Air Station Patuxent River, banks and credit unions, and the network of small businesses across the county. When losses surface, the response usually moves through internal investigation before law enforcement becomes involved.
This article walks through how an internal investigation becomes a criminal embezzlement case and where the defense usually finds traction. For the broader St. Mary’s County theft framework, see our complete theft and robbery defense guide.
The Internal Investigation
An internal investigation typically begins when something does not reconcile. A monthly accounting review shows missing cash. An inventory count does not match the records. A vendor complains about an unauthorized payment. A coworker reports suspicious behavior. The employer responds by reviewing records, including bank statements, point-of-sale data, security camera footage, email records, and access logs.
The employer often retains forensic accountants or investigators to build the case. The investigation may proceed for weeks or months without the employee’s knowledge. Bank records are pulled. Coworkers are interviewed. Email accounts are reviewed. Access patterns are analyzed. By the time the employee learns of the investigation, the employer has often compiled a binder of documentation that the State’s Attorney’s Office can use directly.
For employees in regulated industries (financial services, healthcare, government contracting), the investigation often involves outside counsel and may be required to be reported to regulators independent of any criminal case. SEC reporting, FinCEN suspicious activity reports, and contract-specific compliance reports can all be triggered before the criminal case begins.
Suspicions before the meeting matter. Employees who notice changes in employer behavior (new locks, restricted access to systems, unusual questions from supervisors, requests to provide documents) sometimes recognize that an investigation is underway. The right time to retain counsel is at that moment, not after the HR meeting. Pre-meeting consultation gives counsel a chance to evaluate exposure, prepare for the confrontation, and decide whether to attend or send a representative.
The HR Meeting
The HR confrontation is the inflection point in most employee theft cases. The employee is called into a meeting, often without warning, and presented with the evidence the employer has compiled. The employer typically asks for an explanation, a confession, and an agreement on restitution. The meeting is often recorded.
The employee in this moment has rights, but the rights are not the rights that apply in a police interrogation. The Fifth Amendment privilege against self-incrimination applies in any setting where statements may be used to prove a crime, including HR meetings. The employee is not required to answer questions, sign written statements, or admit anything. The employee can request to leave, request to consult counsel, and refuse to participate further until counsel is present.
For public employees and certain government contractors, additional protections apply. The Supreme Court’s decision in Garrity v. New Jersey protects public employees from being compelled to make statements that could be used against them in criminal cases. Statements compelled by the threat of termination cannot be used in a subsequent criminal prosecution. The Garrity protection is technical and fact-specific, and counsel familiar with the doctrine can sometimes preserve it during the HR meeting itself.
The signed confession problem. Many employee theft cases include a written statement signed at an HR meeting in which the employee admits the alleged conduct, often in detail. Those statements are admissible as confessions in the criminal case. They are sometimes obtained under pressure: the employer threatens immediate termination, threatens to call law enforcement, or promises to handle the matter internally if the employee signs. Maryland courts have generally upheld such statements when the employee was not in police custody, although the voluntariness of the confession remains a defense angle.
The Charging Decision and the Value Tier
The State’s Attorney’s Office for St. Mary’s County reviews the file referred by the employer and decides on the charging path. Maryland’s consolidated theft statute reaches embezzlement under the same § 7-104 framework as ordinary theft. The penalty depends on the value of the alleged taking, with the same tier structure: under $100 (90-day misdemeanor), $100 to $1,500 (six-month misdemeanor), $1,500 to $25,000 (five-year misdemeanor), $25,000 to $100,000 (ten-year felony), over $100,000 (twenty-year felony).
Long-term skimming patterns can aggregate quickly. A bookkeeper who took $200 a week over five years has reached $52,000, which crosses into the felony tier. A retail manager who manipulated returns over a year may push past $1,500 without realizing it. The aggregation question is litigable; the defense can sometimes argue that the State has overstated the value or that it should be allocated across multiple counts rather than aggregated into a single count.
For cases under $1,500, the disposition often involves Probation Before Judgment under Criminal Procedure § 6-220 with restitution. For cases over $1,500, particularly those approaching the felony tiers, more aggressive defense work and more contested negotiation are usually required.
PAX River and the Security Clearance Layer
For employees who work at or with Naval Air Station Patuxent River, an embezzlement case carries consequences beyond the criminal exposure. Security clearance holders must self-report any arrest within defined windows under DoD reporting requirements. The clearance review process opens immediately, often before the criminal case has resolved. Suspension of clearance is common; revocation often follows.
Civilian contractors face base access reviews that can end employment regardless of the criminal disposition. Many contractor positions are contingent on continuous base access, and any suspension of access triggers termination clauses. Active-duty service members face exposure under the Uniform Code of Military Justice independent of any civilian criminal case.
The right defense addresses these collateral consequences from the first conversation. Plea structures that resolve the criminal case favorably (PBJ for first offenders, plea to a non-disqualifying offense, dismissal in exchange for full restitution) sometimes preserve the clearance and the employment. Plea structures that produce a felony conviction, or even a misdemeanor conviction in some categories, often do not.
The administrative case runs faster than the criminal case. A clearance review can resolve in weeks. A criminal case can take months. An employee focused solely on the criminal case may lose their job, their clearance, and their career while the criminal case is still pending. Defense strategy must address both timelines together.
Defense Strategy
Effective defense in employee theft cases follows several principles. First, control communications with the employer. Once counsel is retained, all employer communications should run through counsel. Second, carefully evaluate the value calculation. The State’s evidence of the alleged amount is often based on the employer’s own records, which may be challenged for accuracy, methodology, or bias.
Third, consider restitution as a strategic tool. Cases that resolve with full restitution often produce more favorable criminal outcomes than cases that proceed without it. Restitution can sometimes be coordinated with the criminal disposition to support PBJ or a reduced plea. Fourth, address the collateral consequences explicitly. Plea structures should be evaluated against their effect on clearance, base access, professional licensing, and immigration status, not just the immediate sentence.
Cases that genuinely lack proof of theft (where the alleged discrepancy has innocent explanations, where the chain of custody for the records is broken, where the State cannot prove intent) sometimes proceed to trial. The defendant in these cases has the right to require the State to prove every element beyond a reasonable doubt, the right to challenge the employer’s witnesses on cross-examination, and the right to introduce alternative explanations for the alleged loss.
Embezzlement Defense in St. Mary’s County
If your employer has scheduled an HR meeting and the topic is missing money, call before the meeting. Haskell & Dyer represents employees facing internal investigations and embezzlement charges throughout St. Mary’s County.
Main Office: 301-627-5844
24/7 Hotline: 240-687-0179
Related Reading
- Behind the Counter and Beyond the Bag: The Complete St. Mary’s County Theft and Robbery Defense Guide
- Calvert County White Collar Crime Defense Guide
- Calvert County Theft and Robbery Defense Guide
Frequently Asked Questions
What is embezzlement under Maryland law?
Embezzlement is prosecuted under Maryland’s theft statute and involves taking money or property entrusted to you, such as by an employer, with intent to deprive the owner of it.
How do employee theft cases usually begin?
Most cases begin with an internal investigation by the employer after discrepancies are found in accounting records, inventory, or financial transactions.
What happens during an HR meeting in an embezzlement investigation?
The employer presents evidence and may ask for an explanation or confession. The employee is not required to answer questions or sign statements and may request legal counsel.
Can statements made in an HR meeting be used in court?
Yes. Statements or written confessions made during an HR meeting can be used as evidence in a criminal case, even if made under pressure.
What are the penalties for embezzlement in Maryland?
Penalties depend on the amount involved and can range from misdemeanors to felony charges with up to 20 years in prison for high value cases.
Can multiple incidents be combined into one charge?
Yes. The State can aggregate multiple transactions into a single charge if they are part of a continuing scheme, which can increase the total value and severity of the charge.
How does embezzlement affect security clearance holders?
Security clearance holders may face suspension or revocation of clearance, job loss, and reporting requirements, even before the criminal case is resolved.
What defenses are used in embezzlement cases?
Defenses include challenging the accuracy of financial records, disputing intent, questioning the value calculation, and presenting alternative explanations for missing funds.
Does restitution help in an embezzlement case?
Yes. Paying restitution can improve the chances of a favorable outcome, including reduced charges or probation before judgment in some cases.
Can Haskell and Dyer defend embezzlement and employee theft cases?
Yes. Haskell and Dyer represents individuals facing internal investigations and embezzlement charges, focusing on protecting rights, minimizing exposure, and addressing career consequences.
References
Garrity v. New Jersey, 385 U.S. 493 (1967). Supreme Court of the United States.
Maryland Code Annotated, Criminal Law Article § 7-104 (2024). Consolidated theft. Annapolis, MD: General Assembly of Maryland.
Maryland Code Annotated, Criminal Procedure Article § 6-220 (2024). Probation before judgment. Annapolis, MD: General Assembly of Maryland.
U.S. Const. amend. V.
U.S. Department of Defense. (2023). Personnel security clearance reporting requirements: DoD Directive 5220.6. Arlington, VA: Author.
Legal Disclaimer: This article provides general information about Maryland theft law and is not legal advice. Reading it does not create an attorney client relationship with Haskell & Dyer. For a confidential consultation, call 301-627-5844 or our 24/7 hotline at 240-687-0179.
