Wow. Major Security Breach and Cleaning Up the Mess

[pzychobitch]

Was he selling stuff that hadn't been thrown away as well? Or was just improperly raiding the trash bins? One kind of presumes that everything going out of that company is somewhat sensitive, so he shouldn't have been doing it, but if he was at least limiting himself to the trash pile, one can't get as upset as if he were raiding the spare parts room!

My guess is said employee thought they could stay under the radar by only doing the trash bin.

[LillFilly]

Those boxes weren't trash and were labeled as such; they were just old things that had been replaced and/or moved, but their fate was still up in the air, as they still functioned. Maybe the employee figured the stuff would be thrown away eventually, or that it would never be noticed missing.

[mhkohne]

Those boxes weren't trash and were labeled as such; they were just old things that had been replaced and/or moved, but their fate was still up in the air, as they still functioned. Maybe the employee figured the stuff would be thrown away eventually, or that it would never be noticed missing.

Ahh, clearly stealing then. Stupid. Probably could have gotten IT to give them to him when they decided to throw them out.

[lordlundar]

Well it's great that you can recover the items in question, lets not forget the core problem here. IT ignored (not forgot, ignored) a basic tenant of IT security that says to secure or eliminate all sensitive information at all times. So while the guy did steal the items, it was the idiot(s) replacing the systems that allowed it to happen. I've done a lot of system swap outs over the past few years and we have NEVER let a hard drive slip past. Securing the HDD is priority one whenever we're on a site.

Your IT person/people dropped the ball big enough to warrant a policy review.

[EricKei]

First - Awesome job on the investigation ^_^

It's very satisfying taking a mallet to the dead drive though

C'mon. You knew this was coming. Not even gonna label it.

[LillFilly]

I almost wonder if the IT person was in on the whole thing. Why else would they have blundered like that?

There are some polices at my site that just don't make sense; we know they don't, but that's up to the head-honchos across the country to institute a change - all we can do is tell them "Hey, this could be an issue..." And they may or may not choose to listen. The IT Guy was only doing what he was told; in fact, IT were the ones who discovered it and if they had not found the remaining drives we would have had no numbers to go by. I'm sure a lot of polices are going to get a review after this.

[ApolloSZ]

Awesome dective work!! Now to nab them. They would have gotten away with it too, if it wasn't for that meddling Lilly XD

The last HDD I swapped out at work, is currently sitting in parts on my desk. The platter had the arm magnet rubbed all over it.

[MadonnaC]

Wiping isn't good enough...

this is fun: http://youtu.be/AZdZGKyu9hc