We had something similar in one place I lived, sans VLANs I think, but not sure if it makes any diff?

With wireshark you could figure out the MACs available on the network and use the signin of someone else when they were not online by using their MAC adress.