xBiffx
Regardless of how you wish employers are somehow insulated from their employees. If a person or entity is wronged by a worker while representing a company, they take it up with the company. If the company chooses, they can go after that employee for the mis-actions, but the company is not removed from the dispute.
If you think about the above case. The company provided the means, (motivation?) and methods for this crazy person to contact random people on their list. They are hardly completely removed from the situation. By not properly screening this person, they failed in many respects to protect their clients and or public. They must at the very least share the responsibility for the actions and results. Further; when the employer chooses to keep the person's identity secrete, which may or may not be part of the employee contract, they must then accept full responsibility.