Fired employee sought AI help to hide deletion of hosting firm’s customer data

Summary

Two brothers, previously employed by a hosting company serving US federal agencies, were convicted for intentionally deleting customer data after their termination. One brother, Sohaib Akhter, has been convicted of computer fraud and related charges, while the other, Muneeb, has agreed to a statement of facts but is now disputing the charges. The incident highlights the risks of insider threats and the potential weaponization of AI tools.

IFF Assessment

FOE

This article details an insider attack involving data destruction, which is detrimental to the security and integrity of an organization's data and services.

Defender Context

This case underscores the critical importance of robust employee off-boarding procedures to mitigate insider threats. Defenders should be aware of how disgruntled employees might leverage sophisticated tools, including AI, to cause damage, and ensure proper access revocation and data integrity checks are in place.

Read Full Story →