Terminated employee cost company hundreds of thousands of dollars because nobody revoked access
Summary
A terminated employee retained access to company systems, costing the organization hundreds of thousands of dollars. This occurred because the IT department failed to revoke the employee's access promptly.
IFF Assessment
FOE
The incident highlights a critical security lapse where an ex-employee's continued access led to significant financial loss, which is detrimental to defenders.
Defender Context
This case underscores the importance of robust offboarding procedures, including timely access revocation for all systems and applications. Organizations should implement automated processes and regular audits to prevent similar incidents.