What a Disgruntled Ex-Employee Who Cost a Company $678,000 Can Teach All Business Owners

What a Disgruntled Ex-Employee Who Cost a Company $678,000 Can Teach All Business Owners

In early June, Kandula Nagaraju, a 39-year-old former National Computer Systems employee from India, received a two-year, eight-month prison sentence for unauthorized access and deletion of 180 test servers at his previous workplace.

Despite being terminated in October 2022 due to performance issues, Nagaraju retained access to company systems. He used this access to develop and execute scripts that deleted the servers. This action cost NCS approximately $678,000 to rectify. Fortunately, his nefarious deeds did not compromise sensitive data as the servers were isolated and used for app testing. But, the company still suffered an enormous financial loss. Plus, things could have been a lot worse.

This single case serves as a critical reminder: ex-employees can still be a liability, and if they maintain their insider access, they can exploit said access to inflict extensive damage. Not only monetarily, but on a much wider and more consequential scale. So harmful, that it could bring a company down and ruin its reputation to the point of no return.

Why Businesses Should Always Delete the Credentials of Former Team Members

Sadly, Nagaraju is just one example of many. Several companies have suffered immensely – but unnecessarily – simply because those organizations did not take the proper steps to protect themselves. Instead, they were complacent or too late to act and the results were disastrous. Because of these instances, businesses should always remove ex-employee credentials to keep their corporate data and work product secure for several reasons:
  • Data security. Ex-employees may still have access to sensitive company information, such as customer data, trade secrets, or financial information. Removing their access ensures that this data remains secure and is not accessed or misused by unauthorized individuals.
  • Prevent unauthorized access. Even if an ex-employee has left the company – even on good terms – there is always a risk that they could use their access to the company’s systems to make changes or access data without approval. Removing their credentials prevents this from happening.
  • Compliance. Many industries have regulations that require companies to protect sensitive data. By removing ex-employee credentials, companies can ensure they are meeting these compliance requirements.
  • Insider threats. Ex-employees may be disgruntled or may have left the company under less-than-ideal circumstances. They could potentially use their access to company systems to sabotage the company or steal data. Removing their credentials helps to mitigate this risk.
  • Avoid confusion. If an ex-employee’s credentials are not removed, it can lead to confusion about who has access to what. This can make it more difficult to manage access to systems and data.
And last but not least, data breach prevention. If an ex-employee’s credentials are compromised, it could lead to a data breach. Removing their credentials helps to prevent this. By deleting their access, companies have less risk of sensitive information getting out into the public domain. Because once that data is out, it’s up for grabs for anyone to capture it.

So, businesses of all sizes should have a process in place to address such security issues. When an employee leaves the company voluntarily or a team member is terminated, that person’s credentialed access should immediately be removed. Additionally, steps must be taken to fill that new void to ensure workflow continues virtually uninterrupted in order to meet benchmarks and deadlines. Moreover, to keep proprietary data safe.

Want to Accomplish More?

Do you want your company to grow faster and earn more while you spend more time with your family doing all the things you started your business to do?

We can make that dream a reality. Give us 30 minutes and we will show you how to get your life back. Skeptical? Good! Put us to the test.

You can call us for your free appointment at (602) 541-1760, or, if you prefer, Waters Business Consulting Group to learn more about us and the services we offer.

Like this article?

Share on Facebook
Share on Twitter
Share on Linkdin
Share on Pinterest

Related Posts

How to Move Past a Bad Business Policy

You identified a problem, took action, and enacted a new policy. Your people don’t like it (read: hate it), and, now you’re dealing with the fallout. It’s not an enviable position to be in, but nonetheless, here you are and now, you have to take action–again. The advice you’ve long heard about learning from your mistakes is now a reality, and, you are willing and able to accept it. The problem is how to move past a bad business policy and avoid repeating the same mistake in the future. Though you know this one backfired, you can’t be sure of how other policies you enact moving forward will impact your team and your business at-large. It’s okay to be retrospective and to attempt to peer around the corner, but for now, what you really need is to make things right. How to Move Past a Bad Business Policy The very fact that you are willing to recognize you made a mistake is a positive sign. However, you might still have a problem to deal with and you don’t want Murphy walking back into your organization, wielding his rule which states, “every solution breeds new problems.” You’ve already seen that unfold and it should have phased you enough to make a change. …we hate to fail. We fear it, we dread it, and when it does happen, we hold onto it. We give it power over our emotions, and sometimes we allow it to dictate our way forward (or backward). Some of us go to great lengths to avoid failure because of all the pain and shame associated with it. —Forbes It’s also good that you’re self-aware enough to accept the blame instead of digging in and defending what you’ve done, which will only insult your team members. So, how do you prevent this from happening again, but, still be able to enact policies that don’t end-up backfiring? Here are some helpful bits of advice you can use: Don’t be afraid to admit you made a mistake. This bears repeating, and, it does so big time. There’s little else more damaging than a leader who won’t admit he or she is wrong. It’s arrogant, harmful, and can cause good people to leave. In fact, the best thing to do is to have a sit down with your employees and others and talk about how you arrived at the decision, why it was wrong, and, how you plan to resolve the situation. Identify the problem and be proactive. Speaking of resolving the situation, you’re inevitably going to face problems again, so, before they have a chance to materialize, do what you can to thwart them. This won’t necessarily be easy, but your intuition will tell you when something is about to become a problem. Get ideas from your team about solutions. Your team members are among your most valuable assets. Don’t go it alone, speak openly with them and listen to their suggestions. You’ll likely find that doing so will present many ideas which can be molded together for a solution. Avoid new policies that create new problems. This is more difficult than you might think, but it’s still possible. Before you do enact a new policy, think about what it will do and how it will be received by your team. If you play it out and identify possible result scenarios, you can usually avoid making another bad policy. In my 34 years of business experience with ownership in 9 different businesses and consulting/coaching with hundreds of business owners, I have a long list of bad business policies that I have made. All of the policies well intended, but many times not fully thought through. My greatest lesson in making policies, is that hiring the right people with the right core values will minimize the policies that seem necessary to police and hold your team accountable. Those employees with the right core values will do what is right almost all of the time, thereby eliminating the need for many policies. [shareaholic app=”follow_buttons” id=”26833294″]

Read More »

How to Deal with Bad, Fake Reviews

You work hard to give your customers a great experience and earn their trust. You’ve built a great reputation in your industry, but out of nowhere, comes this scorching online review. Aside from its negative connotation, you’re baffled by the fact that you have absolutely no idea who this person is or any recollection of this particular transaction. You quickly conclude that it’s a fake. Even so, others will surely see it and that’s just not good for business. So, what can you do about a bad, fake review? Why Online Reviews Matter Online reviews matter. They matter because people use them to judge the quality of a product or service. This is especially true on the internet because there’s no interpersonal input. Let’s face it, it’s a whole lot easier to read reviews than call and email dozens of people to get their feedback on something they might not even have purchased before. These attacks can have huge consequences for a company’s bottom line. Eighty-five percent of people trust online reviews as much as a personal recommendation and every one-star increase can lead to a 5 to 9 percent increase in revenue. Online reviews are also an important ranking signal in Google’s algorithm. —Forbes This is widely understood and is the exact reason why nefarious individuals write bad, fake reviews. They are obviously trying to discourage others from doing business with the victim company. It’s probably a rival but it could be just about anyone — even someone who is just engaging in a malicious prank. How to Deal with Bad, Fake Reviews Regardless of who it is, you can’t let a bad, fake review hurt your reputation. You must do something about it. But, that doesn’t mean angrily snapping back. Here are a few helpful suggestions for how to deal with a bad, fake review: Report the fake review. If you are certain it’s fraudulent, then contact the website where the review was left, whether it’s Facebook, Google, Yelp, or another. You’ll have to go through a process and it might take a bit of time and effort. So, be prepared for dedicating some resources. Look for more bad impostors. Although you spotted this one, that doesn’t mean it’s the only one floating on the web. Search around to see if there are more because if it’s a concerted effort, chances are excellent there are more. (It might even be duplicated word-for-word on other sites.) Respond, but do so strategically. When you do reply, write something like, “We take our customers’ experiences to heart. Unfortunately, we have no record or recollection of any transaction. If you’ve done business with us, we’ll be more than happy to look into the matter. Please contact [name] at [email] so we can mutually resolve this issue.” This probably won’t cause the fraudster to respond, but it does show you’re willing to take the matter seriously to others. What other suggestions do you have for dealing with bad, fake reviews? Please take a moment to comment so others can learn about your thoughts and experiences! Interested in learning more about business? Then just visit Waters Business Consulting Group.

Read More »