375

Fired employee hacked into company’s computer system and deleted servers, causing it to lose S$918,000 - CNA (www.channelnewsasia.com)

submitted 3 months ago by fne8w2ah@lemmy.world to c/world@lemmy.world

76 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[-] aeronmelon@lemmy.world 91 points 3 months ago* (last edited 3 months ago)

That might be slightly illegal.

That person might be slightly doomed.

Companies need to remember to change the login password BEFORE firing people with login passwords.

[-] Zorsith@lemmy.blahaj.zone 15 points 3 months ago

One man IT shop maybe? Usually stuff like that goes through IT, because who in their right mind would give HR modify access to active directory?

[-] Blizzard@lemmy.zip 15 points 3 months ago

Read the article.

[-] Zorsith@lemmy.blahaj.zone 18 points 3 months ago

As a former user of "the other site", I find this suggestion highly offensive /s

[-] thejml@lemm.ee 11 points 3 months ago

Generally a firing is decided the previous day or at least an hour before it happens. Discussions are made prior to the actual meeting where the firing occurs. IT is on standby. They either deactivate the AD account and related auth methods when the employee walks in the office to have the discussion. This is a well oiled machine, so that all parties know their parts. The meeting/discussion is solely a formality and by two minutes into it, theres no longer any access granted. Security shows up at the meeting to escort the employee out and collect their badge or keys. Maybe they let the employee walk by their desk to collect their stuff, maybe the employer ships it to them later, depends on the circumstances and office layout.

[-] KISSmyOSFeddit@lemmy.world 8 points 3 months ago

At my last job I was informed that I'd be terminated, then had to work normally for another month (the termination period), where I still had full domain admin access to all our own and our customers' systems.
On my last day I myself had to write down a list of all the logins I had and give that to my boss, because no one else knew what accesses I even had.
During the last hour I wiped my own company PC and gave back all hardware I was given. Again, there wasn't any record of what I was given over the years so they took my word for it. This included unencrypted USB drives with sensitive medical data on them.

[-] dubyakay@lemmy.ca 3 points 3 months ago

As someone who worked for German, as well as North American companies, your experience is not the norm in NA. Wish it was.

[-] catloaf@lemm.ee 6 points 3 months ago

In well-run orgs, yes. Most places are not well-run.

[-] bilb@lem.monster 0 points 3 months ago

I was let go somewhat recently and I noticed just yesterday that I still have admin access to their facebook app.

[-] Sonicdemon86@lemmy.world 3 points 3 months ago

Time to get busy and say it's a pen test of their systems.

[-] Pacmanlives@lemmy.world 8 points 3 months ago

I mean kind of depends. I got a soft layoff so worked 6 months more and got 3 months pay for the transfer to India.

I think best practices for highly secure environments is at the time of notice you lock the account and give that person 2 weeks off.

Most normal company’s it’s cool work till your last day, do your exit interview and we lock your account on Friday afternoon or Monday

Also you never want to change someone’s password on termination. What if their login is running some business critical tasks? Not best practices but I can tell you it happens a lot especially for reporting. If you lock the account you can always just reenable it and work to fix the issue

[-] Potatos_are_not_friends@lemmy.world 4 points 3 months ago

Last year, I tried my admin creds at my old job and it still worked. I was afraid of retaliation so I sent them a message from a throwaway email about changing their passwords.

[-] KISSmyOSFeddit@lemmy.world 3 points 3 months ago

Legally, it would have been better to send the mail from your personal account.
Otherwise there's a possibility that something happens to get fucked up right around the time you logged in, they pull the logs and find your access.
Bam, motive and opportunity, and no way to provide an alibi.

this post was submitted on 11 Jun 2024

375 points (97.5% liked)

World News

38492 readers

3169 users here now

A community for discussing events around the World

Rules:

Rule 1: posts have the following requirements:
- Post news articles only
- Video links are NOT articles and will be removed.
- Title must match the article headline
- Not United States Internal News
- Recent (Past 30 Days)
- Screenshots/links to other social media sites (Twitter/X/Facebook/Youtube/reddit, etc.) are explicitly forbidden, as are link shorteners.
Rule 2: Do not copy the entire article into your post. The key points in 1-2 paragraphs is allowed (even encouraged!), but large segments of articles posted in the body will result in the post being removed. If you have to stop and think "Is this fair use?", it probably isn't. Archive links, especially the ones created on link submission, are absolutely allowed but those that avoid paywalls are not.
Rule 3: Opinions articles, or Articles based on misinformation/propaganda may be removed. Sources that have a Low or Very Low factual reporting rating or MBFC Credibility Rating may be removed.
Rule 4: Posts or comments that are homophobic, transphobic, racist, sexist, anti-religious, or ableist will be removed. “Ironic” prejudice is just prejudiced.
Posts and comments must abide by the lemmy.world terms of service UPDATED AS OF 10/19
Rule 5: Keep it civil. It's OK to say the subject of an article is behaving like a (pejorative, pejorative). It's NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
Rule 6: Memes, spam, other low effort posting, reposts, misinformation, advocating violence, off-topic, trolling, offensive, regarding the moderators or meta in content may be removed at any time.
Rule 7: We didn't USED to need a rule about how many posts one could make in a day, then someone posted NINETEEN articles in a single day. Not comments, FULL ARTICLES. If you're posting more than say, 10 or so, consider going outside and touching grass. We reserve the right to limit over-posting so a single user does not dominate the front page.

We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.

All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.