Rogue IT worker gets seven months in prison over $200,000 digital rampage — technician changed all of his company's passwords after getting suspended

a year ago by cm0002 to c/sysadmin

Company claims $200,000 losses due to business disruption, plus reputational damage.

al_Kaholic 26 points a year ago

7 months in prison...How many months does the CEO get if an employee is injured on the job. This is a shit hole country.

save

path: 0 18008647, hotness: undefined, score: 26, children: 1

antler 9 points a year ago

I don't disagree with your sentiment. I also don't know where you live. To clarify though, this story is from the UK.

save

path: 0 18008647 18009843, hotness: undefined, score: 9, children: 0

Onomatopoeia 24 points a year ago

I mean, this guy is an ass, and deserves some stuff punishment. Some places this could cause them to close up shop.

On the side, what kind of business doesn't have a team doing this stuff with accountability/approvals/controls, and especially for someone being fired.

save

path: 0 18005036, hotness: undefined, score: 24, children: 2

Cypher 13 points a year ago

save

path: 0 18005036 18006797, hotness: undefined, score: 13, children: 0

IsThisAnAI 2 points a year ago

Most small to medium sized businesses. Having that shit is expensive. Far more then 200k for a single incident.

save

path: 0 18005036 18006958, hotness: undefined, score: 2, children: 0

Lucky_777 18 points a year ago

Suspended or fired. We usually jump on this pretty fast. You never know what people will do. Easy enough to just disable accounts. Weird.

save

path: 0 18005805, hotness: undefined, score: 18, children: 4

TaviRider 16 points a year ago

It’s usually harder to do for admins. They’re usually the ones who do the suspending.

save

path: 0 18005805 18006237, hotness: undefined, score: 16, children: 3

Passerby6497 12 points a year ago

The only way that works in practice is to either have a second admin who gets the order while the first is talking to their boss, or you have a non-technical person with a break glass account that can do it while the admin is in that meeting.

I've had to be the second admin on more than one occasion and it sucks to be the one disabling your coworker/friend when they get fired, but it's part of the job.

save

path: 0 18005805 18006237 18009457, hotness: undefined, score: 12, children: 2

HeyJoe 4 points a year ago

Thankfully, nothing like that has happened here, but we have a break glass account that only 2 people know of, and it's locked in a safe. Also, my place has gotten so good at firing people they know how and when to do it to minimize risk. Like end of day when they are all packed up, and if its a really high up person, top admins are contacted prior and held on standby to disable everything as soon as the word is given. This includes admins. If they are remote, they will normally lock them out of the laptop first and make sure access is gone before letting them know.

save

path: 0 18005805 18006237 18009457 18011279, hotness: undefined, score: 4, children: 0

shalafi 2 points a year ago

Been that guy. Didn't get word until the last second as my head was on the chopping block as well.

save

path: 0 18005805 18006237 18009457 18013701, hotness: undefined, score: 2, children: 0

sunzu2 2 points a year ago

save

path: 0 18013741, hotness: undefined, score: 2, children: 0