Terminated employee cost company hundreds of thousands of dollars because nobody revoked access

https://image.theregister.com/5292773.jpg?imageId=5292773&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

They had more access than the average Joe, and IT didn't track what needed to be cut off

PWNED Welcome back to PWNED, where we talk about organizations that are independently self-owned. This week’s tale of toxic tech involves a disgruntled ex-employee who had the means and opportunity to wreak havoc.

Our story comes courtesy of Yad Senapathy, who serves as CEO of the Project Management Training Institute in Dallas, Texas. He recalls a time many years ago when he used to work in IT at a company with more than 1,000 employees.

While Senapathy was working there, the company terminated an employee, but nobody cut off his access to internal systems. The angry worker logged back in, then deleted files, locked out other people's accounts, and even corrupted a database.

"Several days passed where the person was no longer on payroll, but their credentials were still active," Senapathy said....

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Read more