There's already some good advice in the thread for the OP. I'll add-on that this should not have been an issue in the first place. The company should be protec

There's already some good advice in the thread for the OP. I'll add-on that this should not have been an issue in the first place. The company should be protecting their customers better than this. It is already a failure of the process when employees are _maybe_ revoking their own creds on the way out. Not to mention what other issues actually led to the breach. I'd also suspect a current employee (I feel sick even typing that out) before one that has moved on months ago.