Gregory's Server@thegibson was helping a business team out just because I ran the MFT server... they asked me to send this file- just a one off- and I put it in the outbound queue manually, bypassing some technological controls that I had implemented myself (i.e. file name had to have the client name (that got stripped out) in it, in the same client folder, etc).
|
3 comments
@thegibson Obviously to the reader, I dropped it into the wrong queue. It's work I wasn't supposed to be doing, just helping out coworkers at a deadline, but it technically became a data breach. The executive partnership incident response team had to be notified and the client had to be notified. We were lucky, it wasn't a PUBLIC breach, and the data was... "hard" to make sense of without a few years of context. |
@thegibson The next eventing a client asked what this unexpected file was. I investigated that night. I didn't sleep well. I didn't eat dinner. I didn't eat breakfast. I camped by my laptop in the morning waiting for my sr mgr to log in. then I messaged him "We need to talk, now. It's important".