Client accidentally sends engineer confidential documents, yet refuses to believe engineer after they claim to delete them, leading to a security dispute: ‘I didn’t mind escalating it’

Advertisement
  • 01
    Cheezburger Image 10505169408
  • 02

    Blow a minor incident out of proportions? Dont mind if I do!

    I work as an engineer for a company that assigns me to various client projects. For one such assignment, I was added to a project that wouldn't start for a few weeks, so in the meantime I
    via barthem
  • 03
    stayed focused on other ongoing work. A few days before the project was due to begin, the external project lead sent me a ZIP file containing technical documentation: diagrams,
    via barthem
  • 04
    requirements, and other materials relevant to the upcoming project. I skimmed through it briefly, then moved on with my day. Nothing unusual. A couple of days later, I got an email from the external
    via barthem
  • 05
    company's scheduling manager saying that "a document" had. been sent to me which apparently contained some confidential company information, and asking me to delete the email. That's it.
    via barthem
  • 06
    No file name, no explanation, just a vague "please delete it." I shrugged, deleted the ZIP file, and replied asking if they could resend it without the problematic part. Then I forgot all about it.
    via barthem
  • 07
    That is, until I got a call from the most condescending, passive- aggressive person I've ever dealt witt, the scheduling manager from the client's side. She went on a 30-minute tirade about how the
    via barthem
  • 08
    previous project lead never should've sent me that document, how serious the situation was, and, most memorably, how she couldn't trust that I had actually deleted it. I quote:
    via barthem
  • 09
    "I can't just take your word for it. I'm not just going to trust you because you say so." Right. So at that point, I figured: Im done with you, If you're going
    via barthem
  • 10
    to act like I've just been handed nuclear launch codes, then I'll treat it like I've just been handed nuclear launch codes. I said, "You're absolutely right. I'll contact our Security Operations
    via barthem
  • 11
    team and report a formal security incident. They can coordinate with your SecOps team, and together we can do a full scrub of all relevant mail servers to ensure the document is completely gone. It's really the only way to be certain."
    via barthem
  • 12
    Suddenly, her entire tone changed. "Oh no no no, that won't be necessary. It's fine, I believe you!" She practically stumbled over herself trying to shut it down.
    via barthem
  • 13
    Because escalating this to both companies' SecOps teams would've turned it into a bureaucratic nightmare: incident reports, compliance reviews, and probably someone getting thrown under the bus.
    via barthem
  • 14
    delete
  • 15
    I politely reiterated that I really didn't mind escalating it if it would give her peace of mind. She very quickly decided she had enough peace already. We ended the call, and life moved on.
    via barthem
  • 16
    if you act like I've compromised national security, don't be shocked when I offer to treat it like a national security incident.
    via barthem
  • 17
    avid-learner-bot If a scheduling manager thinks deleting a ZIP file is a national security crisis, maybe the real problem is the person who sent a document without a
    via barthem
  • 18
    password-protected ZIP file in the first place... what's the protocol for handling documents that aren't even classified but somehow trigger a full-blown security panic?
    via barthem
  • 19
    cperiod She backed down way too easy, which I would take as a sign that it should have been immediately extra-priority escalated to Security as a MITM social engineering hack. against both companies.
    via barthem
  • 20
    IIITempered Old Woman This is my favorite kind of MC and the kind I practice myself. Oh, you want to report this/call the police/get the camera footage out? Let's GOOOOOO LOL
    via barthem
  • 21
    Zoreb1 I would have replied, "you just spent 30 minutes insulting me so what changed?"
    via barthem

Tags

Scroll Down For The Next Article