Cribl

A municipality's water utility was compromised by hackers who gained access through a dormant employee account belonging to a former auditor named Greg. The attacker exploited a leaked password that Greg had reused across work and personal accounts, gaining extensive privileges including domain admin and SCADA operator access. The incident highlights critical failures in account management and the importance of regular access audits.