Nobody Can Log In — A Departing Engineer's Logic Bomb — severe-but-plausible scenario — ITOL

Vector: People & Insider · Severity: severe

A core infrastructure engineer on a performance plan resigns. HR disables his account at 17:30 on his last day. At 02:00 the scheduled tasks he planted weeks earlier fire. They delete thirteen domain administrator accounts and change every domain password. They reset local administrator passwords on 2,500 servers and 20,000 workstations, and wipe the backup catalog. At 07:00 no teller, agent or engineer can log in, and an email tells staff the network is 'penetrated' and names a price in bitcoin.