Tuesday, January 14, 2025
A former employee logged into a firm's computer system and deleted business-critical data.
Samina Arshad remotely logged into the system of her ex-employer - an East Lancashire-based care company - twice in two days using the password of a senior manager.
On 31st of May last year, Arshad cancelled the 245 scheduled visits the company’ carers were due to make that day, preventing staff from viewing the visits’ details.
The following day, she accessed the section of the system which stored all of their service users’ details alongside each scheduled visit that person was due to receive for that day and beyond, before deleting it all.
In doing so, Arshad disrupted the company’s operations and put their service users at personal risk: all motivated by a sense of grievance over the circumstances in which she left the company’s employment.
The company contacted Lancashire Police on 3rd June and an investigation was launched by our force’s Cyber Crime Unit.
Arshad, 40, of Crawford Street, Nelson, pleaded guilty to two counts of doing an unauthorised act with intent to impair the operation of, or to prevent/hinder access to a computer.
At Blackburn Magistrates Court last Wednesday (9th January), she was given a 12-month prison sentence suspended for 12 months, ordered to do 60 hours community service and pay £3,000 compensation to the care company.