Human resource departments caught in bind between helping victims and defending firm