https://www.bleepingcomputer.com/news/security/former-it-manager-pleads-guilty-to-attacking-high-school-network/
Conor LaHiff, a former IT manager for a New Jersey public high school, has admitted to committing a cyberattack against his former employer following the termination of his employment in June 2023.
"The simple act of coordinating human resource decisions with IT department actions, such as revoking account access for dismissed personnel, would significantly mitigate such risks."
HAHAHAHAH... ahh... yeah, like that'll ever happen. How do I know my users have been deleted? When I find out by accident 90 days later. I have worked for several companies where HR doesn't do shit for IT. I find out employees have been hired when they show up to my desk, asking for a login and laptop. I find out they were let go when the 90 day expiration report shows who got expired for not logging in for 90 days. "Jim's admin password expired." "Jim left in October." I have worked for companies where the simplest of forms, a form generated by an email or a popup in some ticketing system only requires checking off a checkbox... nothing. Can't be arsed.
Our HR "coordinates" with us and it's not much better.
The form clearly states that they start on the 15th, then ask on the 10th why the user can't start work.
They put the wrong office location so we ship their equipment to the office listed on the form then ask why the user can't start work.
They send an immediate termination notice for a user that leaves at the end of the month, then ask why the user can't work.
They mark that the new hire doesn't need a laptop on the new hire form, then ask why the user can't work.
It's almost like the forms are intended to convey information for others to act on.
What a stupid thing to do... Already working elsewhere, probably wasn't worth the tantrum