'All I did was settle the score': IT employee gets manager fired after finding a bug in code that allows entire company to access clientele

Advertisement
  • 01
    000101010101 (help) customer faq "You think you can get me fired? Ok..." it support solution assistance
  • 02
    Going by the book!
  • 03
    I worked in an IT support capacity as a contractor. A year here, a few weeks there, always for an agency, never for the company. Some years I would have 4 - 5 employers. It worked out great for me.
  • 04
    In December 2016, I was hired by an online pharmacy on a one- year contract. You get a Rx from your doctor, log into their portal, send in an image of your Rx, and it gets mailed to you in a few days, cheaper than your local pharmacy.
  • 05
    The agency that sent me there told me that the employer preferred I work as a contractor for the company and not the agency. Again, fine by me, as long as I get a paycheck, right? 2 weeks after I started, my hiring manager, the CSO (Chief Security Officer), told me that there was
  • 06
    an oversight, and a comprehensive background check needed to be done. This was a police record check, a high- level RCMP check, plus exhaustive employment verification. In the past, I had listed the companies I worked for, not the agencies. Past employers were
  • 07
    OK with that as they understood the world of contractors. Not this dude. So the employment background check comes back and none of the companies could verify I worked for them, as I didn't exist in their books, having worked for the agencies that sent me there.
  • 08
    Also, the employment verification company was based out of the US and not Canada where I live and work. Anyway, the CSO chews me out for "lying" and threatens to fire me on the spot. I pull up all my T4 (income tax) slips I had on Google Drive, pay stubs,
  • 09
    timesheets, images of my ID cards, employment offer letters, and more, to prove I did work at those companies, but for agencies. This was clearly totally unfamiliar to him. To save face, he threatened me that I needed to "go by the book" in every detail or I'd be out on my before I could blink.
  • 10
    Since this was a pharmacy, and if you're in Canada, you would totally understand PIPEDA. Most pharmacies use a Rx filling tool called Kroll. I had total access to the training portal of Kroll. This meant they ran an algorithm that scrambled real
  • 11
    customers' details. Real first and last names, street numbers and names, towns, and cities, birth dates, phone numbers, doctor names, and Rx databases, would get scrambled and reissued. So if I opened a random customer, every detail above would be
  • 12
    pulled from millions of customers in a never-to-repeat random order. 100% foolproof to isolate any specific patient/customer. Except for...... The actual scanned prescriptions. As an example, (making this up for clarity) if I clicked on the "View Rx" field for Mrs. Mary
  • 13
    Wilson of 274 Dunhill Avenue, Grumbell, Alberta, K9F3R8 519- 754-8465, the title, first name, last name, street number, street name, street type, town, province, postal code, phone number, all would be pulled randomly from the database. But there was an actual scanned RX
  • 14
    for a real person, say in Ontario, with their name and address and phone and doctor and the RX details. Holy I'm not supposed to see this. The pharmacists and pharmacy techs who filled the Rx could see patient details, like any
  • 15
    pharmacy. But not me or others. I am not cleared for it. By the book. I immediately went to see the CTO and showed him what I had seen. He went pale, "who else have you shown this to?" Well, no one, but anyone who has access to the training portal could see it if they
  • 16
    burrowed down deep enough, He thanked me and said he would look after it. By the time I got back to my desk, the training portal had been shut down. The CSO was fired the next day. By the book.
  • 17
    Vlaams Belanger. 3 days ago Every good story here has a happy ending firing of a higher up.
  • 18
    Alexis_J_M 3 days ago · By the way, I've worked as a contractor at some very big names and they made it crystal clear that we are not allowed to say that we worked (example) FOR
  • 19
    Microsoft, just that we had a contract AT Microsoft. Ya might want to clean up your resume.
  • 20
    tblazertn 3 days ago The book was thrown at him, so to speak.
  • 21
    Fusionfiction63. 2 days ago Threatens to fire the new guy for not doing things the way he wants, gets fired the very next day. LOL
  • 22
    /p-> MomOfMoe 2 days ago I salute you, OP! It's not often the manglers get exactly what they deserve.

Tags

Scroll Down For The Next Article