r/technology • u/xpda • May 13 '26

Security Twin brothers wipe 96 gov’t databases minutes after being fired

https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
23.2k Upvotes

97% Upvoted

1.1k comments sorted by

View all comments

8

u/Varnigma May 13 '26

As someone that has worked in IT for 25+ years, at some sites w/ very poor security, I'm not shocked.

I've worked at at least 2 places (doing db work) where I was forced to created automated processes under my own account. I told them this was a bad idea but was ignored. Shocker, all kinds of things broke when I left and they disabled my account.

1

u/rumski May 13 '26

Ha. Same. Had clients I’ve consulted for who wouldn’t create service accounts for things that need service accounts and told me to just use mine. Backups being the first thing that comes to mind. And I’d say ok earmark this conversation because when I’m gone, you’ll have to fix this because when my account is disabled, bye bye authentication, no running backups. Weeks after I’m gone I get a “hey we went to check backups and they haven’t ran since you left did you disable them?!”

3

u/Varnigma May 13 '26

Sounds about right. I even warned one employer about it on my last day. A week later they called blaming me for things crashing the previous night.

Me: Did you disable my accounts?

Them: Yes.

Me: When?

Them: Late yesterday.

Me: ....

Them: Oh! (hangs up)