At the center of the case are unauthorized, duplicate railroad access cards being used by "certain LIRR employees," according to the report.