WaterISAC Navigation
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
Home Community Partnerships Fired IT Employee Annihilates 23 of Ex-Employer’s Servers
Become a Member

Log in

  • Upcoming Events
  • Resource Center
  • Tools
  • Webcasts
  • Contaminant Databases
  • Directory
  • About
  • Log in

  • My Account

  • Logout

  • Report Incident
  • Contact Us
  • NRWA Signup
  • WaterISAC Champions
More Resources

Fired IT Employee Annihilates 23 of Ex-Employer’s Servers

Author: Charles Egli

Created: Monday, March 25, 2019 - 22:10

Categories: Cybersecurity

A digital marketing and software company fired one of its IT employees after a month of unsatisfactory performance. The ex-employee responded by stealing the login credentials of a former colleague and deleting the company’s information on 23 Amazon Web Services (AWS) servers. The company was never able to regain the data and lost big contracts a result; authorities estimate its losses amounted to about $700,000. It took months to track down the culprit who, by the time of his arrest, was working for a different company. Recently convicted in court, the man received a sentence of two years jail time. During the trial, both the prosecutor and the company’s CEO admitted the company could have done a better job at security. This includes implementing two-factor authentication, which would have made it harder for the ex-employer to impersonate the current employee. Read the article at Sophos.
 

Related Resources

(TLP:CLEAR) FIRESTARTER Backdoor and Updated Emergency Directive for CISCO Firepower and Secure Firewall Devices

Apr 23, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness
Members Only

(TLP:GREEN) FBI FLASH – Newly Observed Ransomware Variant Black Shrantac Threat to U.S. Entities

Apr 23, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness
Members Only

(TLP:AMBER+STRICT) Likely PRC State-Sponsored Activity Observed in the Water Sector – DocuSign Phishing Tactics Identified

Apr 23, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness

Become a Member
FAQs
About
Report Incident

Terms & Conditions
Privacy Policy
AI Policy
Contact Us

LinkedIn

1250 I Street NW, Suite 350
Washington, DC 20005
1-866-H2O-ISAC (1-866-426-4722)
© 2026 WaterISAC. All Rights Reserved.

Toggle the Widgetbar