Firm admits to making 4 security staff work up to 20 hours a day