My manager asked us all to fill out I-9s (including our names, addresses, SSN and birthdays) and left the filled out forms in the top unlocked drawer at the front desk. As a front desk employee, I can confirm they’ve been sitting there for over a week. I placed mine in an envelope after filling it out, and then was yelled at because folding it makes it harder to scan apparently. I feel really uncomfortable with my information available to other employees like that, and while I don’t expect anyone to try to steal my identity, it has happened to another employee here, and the identity thief was a former front desk employee.
I don’t know how to bring this up to management as they are not always receptive, and may take it as being attacked. It is clear at this point they have no HR training. What do I do?