A judge has sentenced a disgruntled IT worker to more than seven months in prison after he wreaked havoc on his employer's network following his suspension, according to West Yorkshire Police.

According to the police, Mohammed Umar Taj, 31, from the Yorkshire town of Batley, was suspended from his job in nearby Huddersfield in July 2022. But the company didn't immediately rescind his network credentials, and within hours, he began altering login names and passwords to disrupt operations, the statement says.

The following day, he allegedly changed access credentials and the biz's multi-factor authentication settings that locked out the firm and its clients in Germany and Bahrain, eventually causing an estimated £200,000 in lost business and reputational harm.

[1]

"Taj set out to get revenge on his employer following his suspension from work. He did so by targeting their IT system, which he had privileged access to," said Detective Sergeant Lindsey Brants of West Yorkshire Police’s Cyber Crime Team in a [2]statement . "By doing this, he created a ripple effect of disruption far beyond the shores of the UK."

[3]

In Leeds Crown Court, Taj reportedly pleaded guilty to one count of committing unauthorized acts with intent to impair the operation of or to hinder access to a computer. According to [4]local media , he logged his attacks and discussed them on phone calls that were later retrieved by the police.

Curiously, Taj is [5]listed as currently the director of electrical company TJ Performance, which is based at his home address.

[6]Ex-school IT admin binned student, staff accounts and trashed phone system

[7]Fired credit union employee admits: I wiped 21GB of files from company's shared drive in retaliation

[8]IT consultant who deleted every account on UK company Jet2's domain cops 5 months in jail

[9]The 10 worst IT admins of all time

Given [10]the number of stories The Register has recounted of similar rogue admins taking revenge, you'd think companies would be a bit smarter about locking down credentials the second they take action against an employee, particularly if they have privileged access to the network. However, it seems there are some who haven't got the message yet. ®

Get our [11]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aGMI9snMrET5szf98xFgLgAAAlM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://www.westyorkshire.police.uk/news-appeals/disgruntled-it-worker-jailed-cyber-attack-huddersfield

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aGMI9snMrET5szf98xFgLgAAAlM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://www.dewsburyreporter.co.uk/news/crime/batley-it-worker-jailed-after-revenge-cyber-attack-costs-huddersfield-company-ps200000-in-lost-business-5198303

[5] https://find-and-update.company-information.service.gov.uk/company/15914363

[6] https://www.theregister.com/2023/12/01/it_admin_guilty/

[7] https://www.theregister.com/2021/09/01/credit_union_delete/

[8] https://www.theregister.com/2019/12/18/jet2_scott_burns_prison_sentence/

[9] https://www.theregister.com/2012/04/09/worst_10_rogue_employees_in_it/

[10] https://www.theregister.com/2012/04/09/worst_10_rogue_employees_in_it/

[11] https://whitepapers.theregister.com/