It’s always really funny when “security” companies have a centralized DB that grants tons of employees permissions to browse it. What were they thinking?
Could have been much worse.
Could have been much worse.
There are certainly some important lessons for us to learn here but, just for clarity, this wasn't one of them. The data access in question here was central to the individual's daily job responsibilities and done through systems explicitly built for this purpose.