Dormant accounts Ransomware & data theft
Hackney: a dormant account still opened a door
- Incident
- October 2020
- Source report
What was reported
The ICO reprimanded Hackney Council following its October 2020 attack. Attackers accessed and encrypted 440,000 files affecting at least 280,000 people; 9,605 records were exfiltrated. The regulator identified patch-management failures and an insecure password on a dormant account connected to council servers.
Our perspective
Our reading: Permissions need periodic review and a meaningful end. The same discipline belongs in AI connections: an unused tool should not retain a standing route to organizational information.
Try Vivendur in actionLimits of this connection
Encrypted files and stolen records are different measures and should not be conflated. Patch management and account security extend beyond an AI memory product.