This is the IT manager of the Chinese real estate brokerage firm Homelink. Han Bing removed several “vital” financial databases for the company without the possibility of recovery, for which he was later convicted.

How was the employee punished?

The attack on the company’s four servers took place on June 4, 2018, but the investigation and trial has just ended. According to the source, Han Bing was found guilty He was sentenced to seven years in prison. He also had to pay around $30,000 in compensation. actually because it paralyzed the company for several weeks.

• Bing was one of five members of the company’s security team with access to financial system databases.
• The four of them handed over their laptops and passwords soon after the incident, but Bing denied this, saying the computer contained personal information.
• He later agreed to allow investigators to access the device in his presence: they found no evidence of compromising on his laptop.
• However, the company’s internal investigation showed that the attack could only be carried out by connecting to the server without leaving any traces on the laptop.
• Subsequent electronic forensic analysis of the company’s server logs, combined with the use of CCTV footage, allowed connections stored on the server to be associated with Bing’s MacBook, as well as specific MAC and IP addresses associated with its computer.

Colleagues suggested that Bing’s guilt stemmed from a conflict with some other employees in the company and management, who ignored his warnings about vulnerabilities in the system. As such, he became “passive and lethargic, often leaving work late and early,” according to the description. Probably the sysadmin thought it would be rewarded for more open handling of issues.