We are a New York company. An unmarried employee and participant in our 401(k) plan retired three years ago, and maintained his participation in the plan and his existing beneficiary designation after retirement. A year after his retirement, we merged our 401(k) plan into another independently administered plan, and the retiree's account was transferred. The retiree continued his participation in the new plan and made no change to his beneficiary designation at the time of the merger. His account with that plan never received salary deferrals from us due to his retired status.
Shortly before the retiree's death, someone claiming to be the retiree contacted our HR department and asked for a blank beneficiary form for the new plan, which we sent to the e-mail address that the person provided. The retiree never had an e-mail address of record in our files. The blank form we sent was used to submit an executed beneficiary form to the administrator of the new plan. Three months later the retiree died.
Now the formerly designated beneficiary who lost the benefits because of the new form is claiming that the person who contacted us was an imposter and the e-mail address did not belong to the retired employee, and that the executed form submitted to the new plan was fraudulent (including a forged signature, etc.). The former beneficiary says it was unlawful for us to issue a blank beneficiary form under these circumstances, or to issue a form at all because we never had a direct connection to the retiree's account with the new plan through salary deferrals.
Do we have legal exposure to claims by the former beneficiary under ERISA or otherwise? Or are the former beneficiary's claims limited to the new plan for recovery of the benefits?
Thank you for any thoughts.