Disgruntled ex-care worker in Lancashire put people at risk after using manager's password to delete visits
A disgruntled ex-care worker in Lancashire put vulnerable people at risk after using her manager's password to delete scheduled visits.
Samina Arshad remotely logged into the system of her ex-employer - an East Lancashire-based care company - twice in two days using the password of a senior manager.
On May 31 last year, she cancelled the 245 scheduled visits the company’ carers were due to make that day, preventing staff from viewing the visits’ details.
The following day, she deleted the section of the system which stored all of their service users’ details alongside each scheduled visit that person was due to receive for that day and beyond.
In doing so, Arshad disrupted the company’s operations and put their service users at personal risk: all motivated by a sense of grievance over the circumstances in which she left the company’s employment.
The company contacted Lancashire Police on June 3 and an investigation was launched by Lancashire Police’s Cyber Crime Unit.
Arshad, 40, of Crawford Street, Nelson, pleaded guilty to two counts of doing an unauthorised act with intent to impair the operation of, or to prevent/hinder access to a computer.
She was given a 12-month prison sentence suspended for 12 months after appearing at Blackburn Magistrates’ Court last Wednesday.
Arshad was also ordered to complete 60 hours community service and pay £3,000 compensation to the care company.
DC Joe Harper, of the force Cyber Crime Unit, said: “I welcome the sentence imposed by the court which reflects the extreme distress that this crime caused the victim’s service users – to say nothing of the damage to the victim’s business.
“As this case shows, Insider Threats - whether current or former employers - can pose a significant risk to any business’ computer systems.
“However, addressing that risk can be simple.
“We advise that businesses make a New Year resolution to be serious about their cyber security and consider the advice and services offered by the not-for-profit police-led partnership of the North West Cyber Resilience Centre. https://www.facebook.com/northwestcyberresiliencecentre/
“Anyone, whether a business of any size or simply a resident of Lancashire, can find online safety guidance on the National Cyber Security Centre’s website.” https://www.ncsc.gov.uk/section/information-for/you-your-family)