Admins not killing old accounts is a security hole that I'd say 50% of companies I worked with had/have. I can still log into the google workspace, slack, chec

Admins not killing old accounts is a security hole that I'd say 50% of companies I worked with had/have. I can still log into the google workspace, slack, check out confidential documents on drive (not because of transparency, but because they dont know how to share properly). I can check out what is happening in nearly any of their projects by peeking at the channel and if I want to know more, I just take a look at the documents, including their pitches. If I poked for a bit, I could probably also find API keys and DB credentials. These people work for banks, insurances, national televisions, hotels, airlines and more. If I was a bad actor, it would be incredibly easy to cause damage to both them and the clients or do insider trading based on the upcoming project data. But it seems like half of these places just don't care about security - even when contacted, admins/responsible people just flat out ignored it. And then we wonder how breaches happen.