Slashdot Mirror


IT Admin Trashes Railroad Company's Network Before He Leaves (bleepingcomputer.com)

Catalin Cimpanu, writing for BleepingComputer: A federal jury in Minneapolis, Minnesota found a local man guilty of intentionally damaging his former employer's network before leaving the company. The man's name is Christopher Victor Grupe, 46, and from September 2013 until December 2015 he worked as an IT professional for the Canadian Pacific Railway (CPR), a transcontinental railroad based in Alberta, Canada. Things went sideways in December 2015 when CPR suspended Grupe for 12 days for yelling and using inadequate language with his boss. When the man returned to work following his suspension on December 15, management told Grupe they were going to fire him for insubordination. According to court documents obtained by Bleeping Computer, Grupe asked management to resign, effective immediately. He promised to come back the following days and return company property such as his laptop, remote access device, and access badges. He did return the items, as promised, but not before taking the laptop for a last spin inside CPR's network. Court documents show Grupe accessed the company's switches and removed admin accounts, changed passwords for other admin accounts, and deleted log files. When done, Grupe wiped his laptop and returned it to CPR's Minnesota office on December 17, two days after he resigned.

15 of 212 comments (clear)

  1. What an Idiotic Company by Anonymous Coward · · Score: 4, Insightful

    Why do you leave somsone's access privileges in place when you're in the middle of firing them?

    IMHO, they deserved what they got.

  2. And this is why you disable accesss..... by Drakonblayde · · Score: 5, Insightful

    *before* you tell someone you're going to fire them.

    1. Re:And this is why you disable accesss..... by Anonymous Coward · · Score: 5, Informative

      That assumes competent people, in HR as well as in IT. Competent people cost money, "management" does not want to spend money, obviously, if "management" tells an admin with full network access, they are going to fire him...

    2. Re: And this is why you disable accesss..... by JohnFen · · Score: 5, Interesting

      This may be problematic if you're going to fire the very person that would be performing said actions.

      Who has only one person that has admin access to their systems?? What if that person gets hit by a car or quits without notice or something? Shit happen, after all.

      That's as insane as telling someone they're being let go before you remove their credentials.

    3. Re: And this is why you disable accesss..... by jordanjay29 · · Score: 4, Insightful

      Or if fellow IT members don't agree with firing them. Or they give fired employee a heads up before the meeting. "Hey Chris, they just asked me to remove your access, something's up."

      You basically need the IT head (who, if they can't be objective, can at least be counted on to be professional) in HR's office or on the phone before the fired employee leaves the room and make sure it's done.

    4. Re: And this is why you disable accesss..... by decep · · Score: 5, Funny

      What if that person gets hit by a car

      Or a train...

    5. Re:And this is why you disable accesss..... by Snotnose · · Score: 4, Interesting

      *before* you tell someone you're going to fire them.

      CSB. One morning some 20 years ago I was in the sysadmin's office talking to him when some guy popped his head in and said he couldn't log in. Sysadmin said "damn, that wasn't supposed to happen until next week".

      Sure enough, next week there was a layoff and the guy who couldn't log in was one of the head reductees.

  3. Well... did they? by rfengineer · · Score: 5, Funny

    "According to court documents obtained by Bleeping Computer, Grupe asked management to resign..." What was management's answer when asked to resign? Did they?

    1. Re:Well... did they? by freeze128 · · Score: 4, Funny

      I had no idea I could just ask management to resign. I'm totally going to do that from now on.

    2. Re:Well... did they? by Rei · · Score: 5, Funny

      Employee: "I've been working project you assigned me last but I don't have enough to get it done."
      Boss: "Excuse me?"
      Employee: "Do you not want me to the project or should I instead?"
      Boss: "... Can you please use adequate language when speaking with me?"
      Employee: "Go yourself."

      --
      I'll BUILD someone to replace you. Some kind of gamma-powered monster, with a heart as black as coal!
  4. And programmer [Re:What an Idiotic Company] by XXongo · · Score: 4, Insightful
    And what an idiotic IT professional! You'd think he'd have enough sense to not leave his fingerprints all over the sabotage.

    IMHO, they deserved what they got.

    1. Re:And programmer [Re:What an Idiotic Company] by ShanghaiBill · · Score: 4, Insightful

      Anyone who plans to sabotage anything like this on the way out the door deserves everything that comes to them

      Sure, the sabotage was criminal and wrong. But leaving access enabled was still stupid, especially when they knew this guy was irrational and had anger issues.

      Burglars should go to jail, but I still lock my front door.

  5. inadequate language [Re:Huh?] by XXongo · · Score: 4, Funny

    "...using inadequate language..."

    I never realized it before now, but I have exactly that problem, inadequate language to deal with my boss

  6. Stupidest managers ever by argStyopa · · Score: 5, Insightful

    "We've found you SO insubordinate that we have to FIRE you from the company. But yes, we trust you Mr NetAdmin, to take your company laptop home with you."

    Jesus. He's in trouble, but I hope for humanity's sake THEY didn't reproduce.

    --
    -Styopa
  7. inadequate language? by fahrbot-bot · · Score: 4, Funny

    ... suspended Grupe for 12 days for yelling and using inadequate language with his boss.

    So, he wasn't rude enough?

    --
    It must have been something you assimilated. . . .