User refused to change her password because everyone already knew it
A UK school data manager refused to retire the shared password letmein.
In a Register On Call column, a UK school IT hire in 2020 described inheriting a network after a ransomware outage and finding a six-letter password policy with no complexity or expiry. A data manager refused to abandon the password letmein, which staff shared and which was written beside her desk. The principal ordered the change reversed; after a nonprofit took over, the stricter policy returned and the manager retired.
- UK school IT lead found six-character passwords with no expiry.
- A data manager kept the password letmein taped to her desk.
- The principal ordered the stricter policy reversed, then left.
- A later operator reinstated the policy; the manager retired.
From the original article
2 min read at theregister.comSchool staff seemed to be trying to get ransomware – for a second time
By Simon Sharwood · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.