“Turn on syncing?” the browser asked.
“Syncing” tells the browser to allow stored credentials to be available across a person’s devices. And, why not? Sounds convenient.
Well, maybe the browser account password was phished. Or maybe the browser password had been reused from some other, previously compromised account. Whatever the exact reason, syncing turned out to be a problem when the personal browser account got hacked.
And the real problem was that a work login was found by the criminals among the passwords stored by the browser – and these work credentials were used to steal company data and lock the company systems with ransomware.
It’s easy to say the person shouldn’t have had a work login in a personal account. True enough, but what’s the reason someone would be doing that anyway? What things could the business management have done to have prevented this scenario from unfolding? [6 min. read]