>many staff had not altered their passwords in several years becauset hey are required to file a special request to the company’s IT department in order to alt

>many staff had not altered their passwords in several years becauset hey are required to file a special request to the company’s IT department in order to alter login information. There's anti-patterns like inscrutable password rules, aggressive rotation timelines and so on and then there's just straight up Hanlon's Razor in action.