Fired credit union employee admits: I wiped 21GB of files from company's shared drive in retaliation
- Reference: 1630539282
- News link: https://www.theregister.co.uk/2021/09/01/credit_union_delete/
- Source link:
Juliana Barile, 35, according to charges filed by the US Attorney's Office in the Eastern District of New York
[1]PDF
, was working remotely at the credit union on a part-time basis when she was terminated on May 19, 2021. An employee from the credit union is said to have asked the firm's IT department to disable Barile's system access but that didn't happen.Two days later, Barile logged into the credit union's file server and, over the next 40 minutes, trashed it.
[2]
"During that time period, Barile deleted approximately 20,433 files and 3,478 directories, a total of approximately 21.3 gigabytes of data, from the 'P:\' drive on that file server, which the Credit Union’s employees referred to as the 'share' drive," the court filing says.
[3]
[4]
"The deleted data included files related to mortgage loan applications received by the Credit Union, as well as the contents of a folder labeled '! Cynet Ransom Protection(DON’T DELETE),' a folder containing information related to Cynet’s anti-ransomware protection software."
Five days later, on May 26, 2021, Barile is said to have sent a series of text messages to a friend describing her destruction of her former employer's data. In one message, according to the court filing, she wrote, "They didn’t revoke my access so I deleted p drift lol." And she subsequently corrected the typo "p drift" to read "P drive shared file" in reference to the credit union's file server.
[5]Former Cisco exec jailed for fraud, dodging taxes
[6]New on Netflix: A corporate drama in which staff are sued for abusing early access to financial data
[7]PR director at Chinese Twitter analogue Weibo detained on bribery and fraud charges
[8]Alibaba fires manager accused of sexually assaulting colleague
"Ms. Barile may have thought she was getting back at her employer by deleting files, however she did just as much harm to customers," said FBI Assistant Director-in-Charge Michael Driscoll in [9]a statement . "Her petty revenge not only created a huge security risk for the bank, but customers also depending on paperwork and approvals to pay for their homes were left scrambling."
Driscoll added that the credit union and its customers now face the burden of restoring the data. Court documents indicate that the credit union had "some" of the data backed up and that it has spent more than $10,000 undoing the damage.
[10]
This sort of thing happens fairly frequently. In August, 2020, for example, a former Cisco employee [11]admitted to deleting 456 AWS virtual machines for Cisco’s WebEx Teams application without authorization some five months after leaving the networking biz. A year earlier, a former IT admin for Arizona-based Blue Stone Strategy Group, was [12]sentenced to more than two years in prison for deleting his employer's files. Also in 2019, an IT consultant based in the UK earned a two-year sentence for [13]deleting servers from his former employer's AWS accounts.
Having pleaded guilty to one count of computer intrusion, Barile faces up to 10 years imprisonment and a fine when sentenced.
Barile's attorney, Michael Baldassare, of Baldassare & Mara, LLC, declined to comment. ®
Get our [14]Tech Resources
[1] https://www.justice.gov/usao-edny/press-release/file/1428871/download
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YTBMfYS4iJ2ZVLZAlfB9ZQAAAMU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YTBMfYS4iJ2ZVLZAlfB9ZQAAAMU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YTBMfYS4iJ2ZVLZAlfB9ZQAAAMU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.theregister.com/2021/08/31/former_cisco_exec_jailed/
[6] https://www.theregister.com/2021/08/19/sec_netflix_insider_trading/
[7] https://www.theregister.com/2021/08/11/weibo_pr_director_arrested/
[8] https://www.theregister.com/2021/08/09/alibaba_fires_manager_alleged_sexual_assault/
[9] https://www.justice.gov/usao-edny/pr/brooklyn-woman-pleads-guilty-unauthorized-intrusion-credit-union-s-computer-system
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YTBMfYS4iJ2ZVLZAlfB9ZQAAAMU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2020/08/26/former_cisco_engineer_aws_webex_teams/
[12] https://www.theregister.com/2019/07/09/it_admin_deletes_files_jailed/
[13] https://www.theregister.com/2019/03/20/steffan_needham_aws_rampage_prison_sentence_voova/
[14] https://whitepapers.theregister.com/
Court documents indicate that the credit union had "some" of the data backed up
Some, SOME. !
Geez, Understand losing the deltas for that business day. But come on.
I'm not condoning what she did . But two failures on part of the company,
Firstly, disable access when you fire someone.
Secondly, pay for a proper backup / DR strategy
Re: Court documents indicate that the credit union had "some" of the data backed up
It it is a Windows file server, then your first fall back is shadow copies. It is so simple to turn on, I can't understand why more companies don't use it. If you are willing to lose any work since the last shadow, then reverting a complete drive takes almost no time at all. If you don't want to lose anything then you need to mount the shadow and selectively restore with a robocopy job or similar. Even this shouldn't take a huge amount of time though.
If this doesn't work, then go to your backups. How on Earth you go to the effort of just backing up some of your stuff is beyond me. With something like VEEAM, it is a doddle to just backup everything.
Any company that took data security properly would also have extra layers (backup replica, off site copy, lagged copy to another datacenter, backup to tape, all of the above).
Not having a full backup should be criminal negligence. How it can possibly cost $10,000+ to simply recover deleted files a on a single server drive is beyond me.
Re: Court documents indicate that the credit union had "some" of the data backed up
Yep. This is supposed to be a credit union. Data, and data security, is everything to them.
If ever there were a business that really should have a rock solid backup strategy in place, this is one.
Rather moronic
Not to revoke access when you fire someone.
Even more so to delete your ex-employers data and then boast about it.
Sheesh