Client accidentally sends engineer confidential documents, yet refuses to believe engineer after they claim to delete them, leading to a security dispute: ‘I didn’t mind escalating it’

Advertisement
  • 01
    Cheezburger Image 10505169408
  • Advertisement
  • 02

    Blow a minor incident out of proportions? Dont mind if I do!

    I work as an engineer for a company that assigns me to various client projects. For one such assignment, I was added to a project that wouldn't start for a few weeks, so in the meantime I
  • 03
    stayed focused on other ongoing work. A few days before the project was due to begin, the external project lead sent me a ZIP file containing technical documentation: diagrams,
  • 04
    requirements, and other materials relevant to the upcoming project. I skimmed through it briefly, then moved on with my day. Nothing unusual. A couple of days later, I got an email from the external
  • Advertisement
  • 05
    company's scheduling manager saying that "a document" had. been sent to me which apparently contained some confidential company information, and asking me to delete the email. That's it.
  • 06
    No file name, no explanation, just a vague "please delete it." I shrugged, deleted the ZIP file, and replied asking if they could resend it without the problematic part. Then I forgot all about it.
  • 07
    That is, until I got a call from the most condescending, passive- aggressive person I've ever dealt witt, the scheduling manager from the client's side. She went on a 30-minute tirade about how the
  • Advertisement
  • 08
    previous project lead never should've sent me that document, how serious the situation was, and, most memorably, how she couldn't trust that I had actually deleted it. I quote:
  • 09
    "I can't just take your word for it. I'm not just going to trust you because you say so." Right. So at that point, I figured: Im done with you, If you're going
  • 10
    to act like I've just been handed nuclear launch codes, then I'll treat it like I've just been handed nuclear launch codes. I said, "You're absolutely right. I'll contact our Security Operations
  • Advertisement
  • 11
    team and report a formal security incident. They can coordinate with your SecOps team, and together we can do a full scrub of all relevant mail servers to ensure the document is completely gone. It's really the only way to be certain."
  • 12
    Suddenly, her entire tone changed. "Oh no no no, that won't be necessary. It's fine, I believe you!" She practically stumbled over herself trying to shut it down.
  • 13
    Because escalating this to both companies' SecOps teams would've turned it into a bureaucratic nightmare: incident reports, compliance reviews, and probably someone getting thrown under the bus.
  • Advertisement
  • 14
    delete
  • 15
    I politely reiterated that I really didn't mind escalating it if it would give her peace of mind. She very quickly decided she had enough peace already. We ended the call, and life moved on.
  • 16
    if you act like I've compromised national security, don't be shocked when I offer to treat it like a national security incident.
  • Advertisement
  • 17
    avid-learner-bot If a scheduling manager thinks deleting a ZIP file is a national security crisis, maybe the real problem is the person who sent a document without a
  • 18
    password-protected ZIP file in the first place... what's the protocol for handling documents that aren't even classified but somehow trigger a full-blown security panic?
  • 19
    cperiod She backed down way too easy, which I would take as a sign that it should have been immediately extra-priority escalated to Security as a MITM social engineering hack. against both companies.
  • Advertisement
  • 20
    IIITempered Old Woman This is my favorite kind of MC and the kind I practice myself. Oh, you want to report this/call the police/get the camera footage out? Let's GOOOOOO LOL
  • 21
    Zoreb1 I would have replied, "you just spent 30 minutes insulting me so what changed?"

Tags

Scroll Down For The Next Article