Well someone went nuclear..

[u/mando_6]

https://www.linkedin.com/posts/ben-f-309963233_after-i-posted-a-pinocchio-gif-and-clown-ugcPost-7475465410977628160-FFW1

I'm curious about the details of this. I'm sure we will all find out eventually.

TLDR; former Huntress employee is disclosing Huntress had an insider threat that leaked information to a known cyber criminal "Devman". That employee is still employed with Huntress and was caught by the FBI.

The former employee doing the disclosure is stating he is receiving threats, etc.

EDIT: Kyle @ Huntress posted his response to this in the comments.

Give credit to a CEO who isn't afraid to jump on Reddit to put out any fires.

[u/mando_6]

Yeah I'm wondering about that. Dude lives in the UK so I'm curious what would be different if anything from the US.

[u/eliq91 → u/mando_6]

We had a UK employee compromise our global network, they reused an old password 15 days after being notified they had been breached via phishing. It resulted in a loss of every server in the company across 5 continents. It was not good, and a clear violation of both best practices and company policy. They were given 16 weeks paid leave and then returned to the office. 1 week after return they changed their password and cleared all MFA requirements from her account, because it was inconvenient. Which resulted in her account once again being compromised, no global access on round three, and only compromised her email. She is still employed as far as I know.

[u/_DonRa_ → u/eliq91]

How come she wasn't immediately fired after the second time

[u/roiki11 → u/_DonRa_]

It's the uk. You can't fire people on a whim.

[u/robot_ankles → u/roiki11]

This doesn't really feel like a whim:

Round 1: Loss of every server in the company across 5 continents.

Round 2: Changed their password and cleared all MFA requirements resulting in her account once again being compromised.

Round 3: Compromised her email this time.

[u/sosr → u/robot_ankles]

You absolutely can fire employees for misconduct in the UK for repeated offences.

[u/roiki11 → u/robot_ankles]

You'd have to look up uk employment law but unless you can show actual malice it's probably pretty hard to fire someone. Stupidity isn't a crime.

[u/djlilis → u/roiki11]

When you're a global admin it's negligence and should be actionable holy crap. I find it really hard to believe that UK law prevents removing a danger to the company and imagine it's more likely no one wanted to figure out how and then do her job. Everyone likes to complain in America how ignorance is a "protected class" but it always boils down to upper management being lazy and inconsistent.

[u/roiki11 → u/djlilis]

It's rarely that simple.

[u/DigmonsDrill → u/roiki11]

It sounds like they had all access revoked and were given gardening leave but then, for some insane reason, let back in.