Several levels here…
Why was she pissed enough to wipe a drive?
Why did she still have access - someone in helpdesk has a backlog I guess and as nothing bad has ever happened when an employee leaves it’s not a priority… I guess it will be from today!
How long did the help desk take to restore from a shadow copy or backup? I would have guessed that having important customer data on a shared drive entails shadow copies and full backups….. no?
Not to diminue what happened as if they had a solid BAR plan this would have sent half the company into a tizzy for an hour or two, but times that by the number of affected employees , that’s a serious chunk of change that they could claw back in a lawsuit….
And always reach out directly to your friendly neighbourhood sysadmin to confirm account locking when you plan a termination…
Biting the hand that feeds IT
