True, but I expect the first to be "caught" to be the ones that are consuming bandwidth as the IT department is kind of monitoring it. At least those who have a lot of connections through web proxies (which is not my case, as I check only a few blogs and forums).

And also I don't think that they will fire anyone without at least getting a warning first, so until someone gets a warning it is "kind of" safe...