Feeds

Fired IT director admits $94k rampage on organ bank

Revenge served coldly

  • alert
  • submit to reddit

Build a business case: developing custom apps

A former technology director who was fired from a regional organ donation center in Texas has admitted to breaking into her former employer's network and destroying more than $94,000 worth of data.

Danielle Duann, 51, of Houston admitted that in November 2005 she illegally accessed the network of LifeGift just hours after bosses told her she was terminated. From the evening of November 7 through the following morning, she used a Dell laptop and her home broadband account to delete organ donation information and account invoices. The rogue employee also nuked server logs in an attempt to cover her tracks.

The rampage is a potent reminder of the havoc disgruntled IT workers can wreak when employers don't take the proper precautions. According to court documents, LifeGift managers didn't disable Duann's virtual private network account and didn't change the login credentials of other employees, either. The failure made it possible for Duann to use her VPN account to reach the LifeGift network, and then use an administrator account belonging to another employee.

The damage could have been much worse were it not for the employee of an outside company called CompuCom who was in the process of providing backup and disaster recovery services. The employee just happened to be on-site at LifeGift on the morning that Duann carried out her revenge.

"The CompuCom employee, who observed Duann in real time deleting files from the LifeGift computer servers, realized the defendant was accessing the LifeGift computer network via the 'dduann' VPN account," court documents state. "At approximately 10:45 am on November 8, 2005, the CompuCom employee terminated Duann's VPN connection, thereby preserving the VPN connection logs which showed that Duann had accessed the LifeGift computer network via her home internet connection."

Located in Houston, LifeGift is the sole provider of organ procurement services for 200 hospitals in Texas.

Duann pleaded guilty to one felony count of computer intrusion in connection with the crime. She has agreed to pay $94,200 in restitution. She faces a maximum sentence of 10 years in prison and a $250,000 fine. Sentencing is scheduled for July 28. ®

Endpoint data privacy in the cloud is easier than you think

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
iWallet: No BONKING PLEASE, we're Apple
BLE-ding iPhones, not NFC bonkers, will drive trend - marketeers
Multipath TCP speeds up the internet so much that security breaks
Black Hat research says proposed protocol will bork network probes, flummox firewalls
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
Microsoft's Euro cloud darkens: US FEDS can dig into foreign servers
They're not emails, they're business records, says court
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
prev story

Whitepapers

7 Elements of Radically Simple OS Migration
Avoid the typical headaches of OS migration during your next project by learning about 7 elements of radically simple OS migration.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Solving today's distributed Big Data backup challenges
Enable IT efficiency and allow a firm to access and reuse corporate information for competitive advantage, ultimately changing business outcomes.
A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?