https://www.bleepingcomputer.com/news/security/fired-ny-credit-union-employee-nukes-21gb-of-data-in-revenge/ BleepingComputer.com logo * * * [ ] [Login] [Sign up] * * * [ ] [Login] [Sign up] * News + Featured + Latest + Babuk ransomware's full source code leaked on hacker forum Babuk ransomware's full source code leaked on hacker forum + Conti ransomware now hacking Exchange servers with ProxyShell exploits Conti ransomware now hacking Exchange servers with ProxyShell exploits + Atlassian Confluence flaw actively exploited to install cryptominers Atlassian Confluence flaw actively exploited to install cryptominers + Microsoft releases Windows 11 feature update for enterprise testing Microsoft releases Windows 11 feature update for enterprise testing + Watch out for new malware campaign's 'Windows 11 Alpha' attachment Watch out for new malware campaign's 'Windows 11 Alpha' attachment + US SEC: Watch out for Hurricane Ida-related investment scams US SEC: Watch out for Hurricane Ida-related investment scams + Windows 11 may not get security updates on unsupported devices Windows 11 may not get security updates on unsupported devices + Get started in networking with 75 hours of Cisco exam training for $69 Get started in networking with 75 hours of Cisco exam training for $69 * Downloads + Latest + Most Downloaded + Qualys BrowserCheck Qualys BrowserCheck + STOPDecrypter STOPDecrypter + AuroraDecrypter AuroraDecrypter + FilesLockerDecrypter FilesLockerDecrypter + AdwCleaner AdwCleaner + ComboFix ComboFix + RKill RKill + Junkware Removal Tool Junkware Removal Tool * Virus Removal Guides + Latest + Most Viewed + Ransomware + How to remove the PBlock+ adware browser extension How to remove the PBlock+ adware browser extension + Remove the Toksearches.xyz Search Redirect Remove the Toksearches.xyz Search Redirect + Remove the Smashapps.net Search Redirect Remove the Smashapps.net Search Redirect + Remove the Smashappsearch.com Search Redirect Remove the Smashappsearch.com Search Redirect + Remove Security Tool and SecurityTool (Uninstall Guide) Remove Security Tool and SecurityTool (Uninstall Guide) + How to remove Antivirus 2009 (Uninstall Instructions) How to remove Antivirus 2009 (Uninstall Instructions) + How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo + How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller + Locky Ransomware Information, Help Guide, and FAQ Locky Ransomware Information, Help Guide, and FAQ + CryptoLocker Ransomware Information Guide and FAQ CryptoLocker Ransomware Information Guide and FAQ + CryptorBit and HowDecrypt Information Guide and FAQ CryptorBit and HowDecrypt Information Guide and FAQ + CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ * Tutorials + Latest + Popular + How to make the Start menu full screen in Windows 10 How to make the Start menu full screen in Windows 10 + How to install the Microsoft Visual C++ 2015 Runtime How to install the Microsoft Visual C++ 2015 Runtime + How to open an elevated PowerShell Admin prompt in Windows 10 How to open an elevated PowerShell Admin prompt in Windows 10 + How to Translate a Web Page in Google Chrome How to Translate a Web Page in Google Chrome + How to start Windows in Safe Mode How to start Windows in Safe Mode + How to remove a Trojan, Virus, Worm, or other Malware How to remove a Trojan, Virus, Worm, or other Malware + How to show hidden files in Windows 7 How to show hidden files in Windows 7 + How to see hidden files in Windows How to see hidden files in Windows * Deals + Categories + eLearning eLearning + IT Certification Courses IT Certification Courses + Gear & Gadgets Gear + Gadgets + Security Security * Forums * More + Startup Database + Uninstall Database + File Database + Glossary + Chat on Discord + Send us a Tip! + Welcome Guide * Home * News * Security * Fired NY credit union employee nukes 21GB of data in revenge * * Fired NY credit union employee nukes 21GB of data in revenge By Sergiu Gatlan * September 1, 2021 * 11:23 AM * 6 Fired NY credit union employee nukes 21GB of data in revenge Image: Elisa Ventur Juliana Barile, the former employee of a New York credit union, pleaded guilty to accessing the financial institution's computer systems without authorization and destroying over 21 gigabytes of data in revenge after being fired. "In an act of revenge for being terminated, Barile surreptitiously accessed the computer system of her former employer, a New York Credit Union, and deleted mortgage loan applications and other sensitive information maintained on its file server," Acting U.S. Attorney Jacquelyn M. Kasulis said. Over 20,000 documents destroyed within 40 minutes According to court documents, the defendant worked remotely as a part-time employee for the credit union until May 19, 2021, when she was fired. Even though a credit union employee asked the bank's information technology support firm to disable Barile's remote access credentials, that access was not removed. Two days later, on May 21, Barile logged on for roughly 40 minutes. The defendant deleted over 20,000 files and around 3,500 directories during that time, totaling roughly 21.3 gigabytes of data stored on the bank's share drive. The wiped included files related to customers' mortgage loan applications and the financial institution's anti-ransomware protection software. Besides deleting documents with customer and company data, Barile also opened various confidential Word documents, including files containing board minutes for the credit union. Five days later, on May 26, she also told a friend via text messages how she was able to destroy thousands of documents on her former employer's servers, saying, "They didn't revoke my access so I deleted p drift lol. [..] I deleted their shared network documents." BARILE court documents Although the New York credit union had backups of some of the data deleted by the defendant, it still had to spend more than $10,000 to restore the destroyed data following Barile's unauthorized intrusion. "Ms. Barile may have thought she was getting back at her employer by deleting files, however she did just as much harm to customers," FBI Assistant Director-in-Charge Driscoll added. "Her petty revenge not only created a huge security risk for the bank, but customers also depending on paperwork and approvals to pay for their homes were left scrambling. "An insider threat can wreak just as much havoc, if not more, than an external criminal. The bank and customers are now faced with the tremendous headache of fixing one employee's selfish actions." Related Articles: LockBit ransomware recruiting insiders to breach corporate networks Microsoft takes down domains used to scam Office 365 users * Employee * Financial Institutions * Insider Threat * Lawsuits * New York * * * * * Sergiu Gatlan Sergiu Gatlan is a reporter who covered cybersecurity, technology, Apple, Google, and a few other topics at Softpedia for more than a decade. Email or Twitter DMs for tips. * Previous Article * Next Article Comments * TsVk! Photo TsVk! - 2 days ago + + After committing a crime it's usually not a good idea to put a confession in writing. * chadf Photo chadf - 4 hours ago + + That assumes most criminals are smart. * ReadandShare Photo ReadandShare - 2 days ago + + Per article: "Even though a credit union employee asked the bank's information technology support firm to disable Barile's remote access credentials, that access was not removed." Bank may have recourse with their IT support firm. * spectre8 Photo spectre8 - 1 day ago + + That the IT department didn't follow process and delete her account is a point in her favor. The defense is going to have a field day with that. * h_b_s Photo h_b_s - 23 hours ago + + "That the IT department didn't follow process and delete her account is a point in her favor. The defense is going to have a field day with that." No. It wouldn't. The deed was done. She plead guilty. I doubt a judge will be all that sympathetic with the defense plea that she wouldn't have done it if.... She did the crime out of spite. But, the credit union is almost certain to have a valid tort case against the IT company. I would definitely expect this one to settle "for an undisclosed sum" rather than the IT company take their chances with a jury. * chadf Photo chadf - 4 hours ago + + Hopefully they had routine backups which are protected from normal user access. But it was odd that an average employee would have access to delete security software too, not just files that needed to be shared between people. Though, it makes me wonder what lack of privacy (or other regulations) the credit union may have been violating with employees having direct access to so much data, without any apparent auditing or access control. Post a Comment Community Rules You need to login in order to post a comment [Login] Not a member yet? Register Now You may also like: [INS::INS] [Bleeping_Computer_CIR_2021_03] Popular Stories * USCYBERCOM US govt warns orgs to patch massively exploited Confluence bug * Popular article Translated Conti ransomware playbook gives insight into attacks Newsletter Sign Up To receive periodic updates and news from BleepingComputer, please use the form below. [ ] [Submit] Latest Downloads * Windows Repair (All In One) Logo Windows Repair (All In One) Version: 4.11.5 1M+ Downloads * Sophos Home Logo Sophos Home Version: NA 16,736 Downloads * HitmanPro Logo HitmanPro Version: 3.8 1M+ Downloads * AdwCleaner Logo AdwCleaner Version: 8.3.0.0 55M+ Downloads * Qualys BrowserCheck Logo Qualys BrowserCheck Version: NA 18,609 Downloads Newsletter Sign Up [ ] [Submit] * Follow us: * * * * Main Sections * News * Downloads * Virus Removal Guides * Tutorials * Startup Database * Uninstall Database * File Database * Glossary Community * Forums * Forum Rules * Chat Useful Resources * Welcome Guide * Sitemap Company * About BleepingComputer * Contact Us * Send us a Tip! * Advertising * Write for BleepingComputer * Social & Feeds * Changelog Terms of Use - Privacy Policy - Ethics Statement Copyright @ 2003 - 2021 Bleeping Computer^(r) LLC - All Rights Reserved Login Username [ ] Password [ ] [*] Remember Me [ ] Sign in anonymously [Login] Sign in with Twitter button Sign in with Twitter --------------------------------------------------------------------- Not a member yet? Register Now Reporter Help us understand the problem. What is going on with this comment? * ( )Spam * ( )Abusive or Harmful * ( )Inappropriate content * ( )Strong language * ( )Other [ ] * [ ] Read our posting guidelinese to learn what content is prohibited. Submitting... SUBMIT