What a Disgruntled Ex-Employee Who Cost a Company $678,000 Can Teach All Business Owners In early June, Kandula Nagaraju, a 39-year-old former National Computer Systems employee from India, received a two-year, eight-month prison sentence for unauthorized access and deletion of 180 test servers at his previous workplace. Despite being terminated in October 2022 due to performance issues, Nagaraju retained access to company systems. He used this access to develop and execute scripts that deleted the servers. This action cost NCS approximately $678,000 to rectify. Fortunately, his nefarious deeds did not compromise sensitive data as the servers were isolated and used for app testing. But, the company still suffered an enormous financial loss. Plus, things could have been a lot worse. This single case serves as a critical reminder: ex-employees can still be a liability, and if they maintain their insider access, they can exploit said access to inflict extensive damage. Not only monetarily, but on a much wider and more consequential scale. So harmful, that it could bring a company down and ruin its reputation to the point of no return. Why Businesses Should Always Delete the Credentials of Former Team Members Sadly, Nagaraju is just one example of many. Several companies have suffered immensely – but unnecessarily – simply because those organizations did not take the proper steps to protect themselves. Instead, they were complacent or too late to act and the results were disastrous. Because of these instances, businesses should always remove ex-employee credentials to keep their corporate data and work product secure for several reasons: Data security. Ex-employees may still have access to sensitive company information, such as customer data, trade secrets, or financial information. Removing their access ensures that this data remains secure and is not accessed or misused by unauthorized individuals. Prevent unauthorized access. Even if an ex-employee has left the company – even on good terms – there is always a risk that they could use their access to the company’s systems to make changes or access data without approval. Removing their credentials prevents this from happening. Compliance. Many industries have regulations that require companies to protect sensitive data. By removing ex-employee credentials, companies can ensure they are meeting these compliance requirements. Insider threats. Ex-employees may be disgruntled or may have left the company under less-than-ideal circumstances. They could potentially use their access to company systems to sabotage the company or steal data. Removing their credentials helps to mitigate this risk. Avoid confusion. If an ex-employee’s credentials are not removed, it can lead to confusion about who has access to what. This can make it more difficult to manage access to systems and data. And last but not least, data breach prevention. If an ex-employee’s credentials are compromised, it could lead to a data breach. Removing their credentials helps to prevent this. By deleting their access, companies have less risk of sensitive information getting out into the public domain. Because once that data is out, it’s up for grabs for anyone to capture it. So, businesses of all sizes should have a process in place to address such security issues. When an employee leaves the company voluntarily or a team member is terminated, that person’s credentialed access should immediately be removed. Additionally, steps must be taken to fill that new void to ensure workflow continues virtually uninterrupted in order to meet benchmarks and deadlines. Moreover, to keep proprietary data safe. Want to Accomplish More? Do you want your company to grow faster and earn more while you spend more time with your family doing all the things you started your business to do? We can make that dream a reality. Give us 30 minutes and we will show you how to get your life back. Skeptical? Good! Put us to the test. You can call us for your free appointment at (602) 541-1760, or, if you prefer,

Make no mistake about it, this is a very serious situation, no matter the dollar amount. Regardless of what was spent and for which items, this is theft. It is essentially stealing company funds for personal use. Now, if this sounds way too stringent, that’s because you’re probably not thinking of it in a more dire manner (you likely have a very good relationship with this employee). However, if you strip all that aside and look at it in pure dollars and cents, along with personality traits like integrity, this ought to infuriate you. So, let’s take a look at what to do if an employee is using a company credit card for personal use. Common Company Credit Card Risks Obviously, putting company credit cards in the hands of employees assumes a certain level of risk. While you may have strict policies regarding their proper use, it’s still ultimately up to the individual to obey those rules. Of course, every employee with a company credit card must be trusted to a large extent. And even though he or she may have acted responsibly in the past, that certainly doesn’t guarantee he or she will continue to do so in the future. Corporate credit cards are an important tool for many companies. Using the company credit card is often the ideal way to manage individual expenses like entertaining clients and business travel. However, company credit cards are also one of the most notorious leaks of company funds to bad employee decisions. From simple bad budgeting decisions to outright fraud and theft, these cards create undue opportunity and temptation for employees to misuse company funds. Fortunately, you can keep these incidents to a minimum… —Business.com Company credit cards are given out as a matter of convenience, but they do not come without a substantial risk factor. For instance, an employee could get into a personal pinch and use the card for emergency situations at home and you’ll only find out about it after the fact. Then, there are a few incidental mistakes. It’s entirely possible that your employee has a similar-looking card and accidentally makes a purchase with the wrong one, using the company credit card rather than their own. In the latter example, it’s entirely understandable, but if he or she does not take a proactive attempt to reimburse you or simply says nothing and hopes it will slide by, you have a problem on your hands. How to Deal with an Employee Who uses a Company Credit Card for Personal Expenses There are really two different scenarios that could play out. Someone who uses a company credit card for small, inexpensive items and someone who routinely misuses the card for personal expenses. Here are some suggestions for how to deal with an employee who uses a company card for personal use: Know exactly what the purchases were. Before you say anything to this employee, be sure to go through the monthly statement line by line to identify the purchases and their amounts. It would also be wise to go back through the last few months’ worth of previous statements to see if this is a pattern or not. You might just discover this has been going on for quite a long time. Know the laws in your state. This is where it gets serious. Even if the card was used for small purchases over a long period, that could add up to a substantial amount of money. Depending on the laws in your state, this could constitute a criminal act. At the very least, if it isn’t considered criminal, it is certainly a fireable offense. Obviously, if the charges were extraordinarily large, you’ll probably want to recoup that money and possibly prosecute the offender. Speak with HR and/or an attorney. Here again, the amount spent and the timeline will be extremely pertinent. If these are large expenses, they could mean something like grand larceny or another crime. Conversely, if the amount spent was small, you might just ask the employee to reimburse the company, what you need to know is if this is severe enough, and what legal options you have, including the possibility of withholding part of their pay. If you do discover an employee has been using a company credit card for their personal expenses, it is very important to take action, regardless of how much was spent or on what and/or over what period of time. If you don’t deal with the situation directly, the behavior will likely continue to happen to the detriment of the company. Interested in learning more about business? Then just visit Waters Business Consulting Group.