Fired IT admin revenge-hacks school by wiping data, changing passwords

Authored by bleepingcomputer.com and submitted by DaveOJ12

A 29-year old wiped data on systems of a secondary school in the U.K. and changed the passwords at an IT company, in retaliatory cyber attacks for being fired.

As a result of his actions, the school’s systems could no longer be accessed and remote learning was impacted at a time when pupils were at home due to the Covid-19 pandemic.

At the beginning of the year on January 16, Adam Georgeson downloaded and deleted data from computers belonging to Welland Park Academy in Market Harborough, Leicestershire, and changed passwords of staff members.

Georgeson had been working as an IT technician at the school but had been fired at the time of the attack.

On January 21, while employed at an IT company in Rutland, Georgeson was arrested for his actions on the school’s network.

However, his new employment did not last long because he was sacked in February and he once again trespassed the digital grounds of his former employer.

On March 9, the company reported unauthorized activity on its network. Apart from changing passwords that locked users out, Georgeson also modified the phone system used to contact customers.

Georgeson appeared at Leicester Crown Court on Monday and pleaded guilty to two cyber hacking offenses, which carry a sentence of up to 10 years in prison.

According to investigating officer Detective Constable Anthony Jones, Georgeson said that he accessed the school’s system because he was bored and then started to wipe data.

When he realized that his actions could be traced and risks getting caught, Georgeson turned to more malicious actions.

“There was a great deal of resentment towards both his former employers - but that’s no excuse for his actions which caused significant problems for both and could’ve had more damaging consequences” - Detective Constable Anthony Jones

Georgeson is scheduled to receive his sentence next year, on January 27.

tbscotty68 on October 7th, 2021 at 03:00 UTC »

Well, he's fucked...

JetScootr on October 7th, 2021 at 00:50 UTC »

Hypothetical situation: So a bank employee is fired, goes back into the vault, changes all the keys on lock boxes. Destroys some property in there, too.

In addition to arresting the fired employee, someone still at the bank should also be fired, maybe even prosecuted: The manager that should have had the job of making sure that couldn't be done, or the bank's executives who understood banking so poorly they didn't have procedures and people in place to prevent that.

I'm tired of seeing ragingly incompetent management of IT being ignored when shit like this happens. Reporters should be asking who was so incompetent that allowed this to happen. I feel like I'm only getting half the story.

JaTheRed on October 7th, 2021 at 00:37 UTC »

Has to be rough firing your head IT guy, has all the keys to the kingdom.