my data's gone missing
A customer phoned to say that our product kept deleting key data - why was it so bad? This was the first complaint we had heard so it was a surprise to us.
After a few days of to-ing an fro-ing they sent us the logs, they were getting more irate.
We went back and said
At 0430 on Monday, a userid JOEBLOGS issued a purge command ... Could this be relevant?
Whoops - thank you - we'll sort him out. They took the evidence to him, and of course he denied it, saying he was away. They brought in the CCTV and showed him sitting at a terminal typing at the date and time the event happened.
He decided to pursue opportunities in other areas.