Compromised password of an inactive account. Do regular audits and deactivate unused accounts, people! At the very least that takes care of the "disgruntled for

Compromised password of an inactive account. Do regular audits and deactivate unused accounts, people! At the very least that takes care of the "disgruntled former employee" scenario. There's a lot of virtual ink in this article devoted to the "how were the credentials compromised" question. I understand the curiosity, but it's mostly unknowable and therefore not too interesting. It's like asking "Why did it rain on the day I didn't bring my umbrella?" Is that the question? "Why did it rain?" The interesting part is the point at which Colonial still had control and gave it up, which was when that employee left or whatever happened, and they didn't revoke those credentials. I keep having a thought about how this account belonged to a fired employee who was not only bad at passwords, but bad at this job too. I have no idea if that's the case, as that's generally confidential info. Kinda funny to think of though.