HR's Disappearing Data
We spent weeks getting abuse from HR about data regularly disappearing from their shared drive. Of course, they absolutely definitely were not deleting it themselves, it was all the fault of IT. They got all the top-nobs involved, demanding that we fix the "IT Issue". There were borderline threating emails & phone calls from directors & board members, promising dire repercussions if our mistakes weren't immediately identified & rectified, preferably served up with a sacrificial head or two.
We monitored. We logged. We investigated.
All the deletions were done by the same account - a member of HR. File activity even continued when that person was on holiday. Digging deeper, we found that because the HR dept had an annoyingly high turnover of temps and contractors, one user figured out that it was easier to simply share their own login details with them all, rather than get new accounts created. They also intentionally left a desktop unlocked and permanently logged in to that account, so that anyone passing through could sit down and use it without so much as even having to log in.
We passed out conclusions up the chain, and heard literally nothing back. An apology would have been nice, but hey, HR.