Stale job access lingers because nobody owns removal
The author says role transfers should trigger a deletion review, with named owners and expiry dates on extra rights.
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #offboarding
Fed employee repeatedly removed sensitive files, watchdog finds
A Federal Reserve staffer repeatedly removed sensitive files, triggering hundreds of data-loss alerts.
Dental contractor set up secret account with access to 4,000 patient records then left the company
A dental practice left an unknown vendor admin account with access to 4,000 patient records active for over three years, creating HIPAA risk.
1
Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
A terminated employee's unrevoked access let him delete files and corrupt a database, costing the company hundreds of thousands of dollars and weeks of delays.
2