• Notice regarding image hosts and attachments. See here.

Sensitive information found on work network.

dont say anything if you want to keep ur job, unauthorised access is againest Computer Misuse Act even if the network is not secure, you did not have permission to view.
 
Even if i want to warn that peoples contracts are available for everyone to see?

well depends on your company policy i suppose you could tell them that you was able to access but did not see.

but you have to be sure that all computers on network can see and not just the boss as he might actually have user access to it
 
well depends on your company policy i suppose you could tell them that you was able to access but did not see.

but you have to be sure that all computers on network can see and not just the boss as he might actually have user access to it

My boss doesnt realise hes actually on the network. Believe me, he isnt really computer savvy.
 
Keep your gob shut. You knowingly went into someone files and didnt stop. As a IT professional (assuming you are) you have to keep the up most or professionlism, which you havnt.

If you found child porn or something of that nature it will be a completly different matter.

Ive since tried to access the same folder but cant get into it now. Why would this folder be open one day, but closed the next?

The last modified dates will of changed, the last open document will be listed in word. Baisicly hes found someones opened it.
 
How do you know he does not have access to those folders, you said you could not get into some folders but into this one.

Sounds like security permissions on network shares.

But yeah keep your gob shut

Kimbie

+1, from what I can gather you accessed your Boss's PC and presumably whilst logged in with his user id accessed stuff that he is meant to see via access granted to his user id. Both you and your Boss should get slaps on the wrists or more, your Boss shouldn't leave his PC unlocked and you shouldn't be accessing somebody else's personal data.
 
In my last job about 20 of us shared our calenders (which I do in my new job) but one of the Managers had put all sensitive data in hers like "April 20th, call Linda to office to end her contract".
She had done this with 3 staff members and eventually one of them couldn't keep quiet.
 
Why were you using your Bosses' computer?

Can you access them from your own?

If you can't, then the problem isn't the security, but your misuse of the equipment...
 
Keep your gob shut. You knowingly went into someone files and didnt stop. As a IT professional (assuming you are) you have to keep the up most or professionlism, which you havnt.

If you found child porn or something of that nature it will be a completly different matter.



The last modified dates will of changed, the last open document will be listed in word. Baisicly hes found someones opened it.

Nah mate, im a GreenKeeper on a golf course, and the network is sharing sensitive information to the Grenkeepers office, im presuming if we can access it then the Pro shop, Kitchen, Bar staff and Steward can also access it.
 
Its ok he probably noticed the file in his recently opened documents and will be adding you to his "July 23rd, call funkyphantom to office to end his contract" public (to him!!) calendar.

What were you thinking looking through your bosses files, of course he will have access to network drives/folders that you dont, they arn't unsecure if you were using his logon.
 
Its the only computer in the office.

So how do you know he wasn't supposed to have access to these files?

Personally I've stumbled across all sorts of stuff on network shares but always when logged in as me on my own workstation; I've never started sniffing about on other people's machines and then branding the network 'unsecure'.
 
In my last job about 20 of us shared our calenders (which I do in my new job) but one of the Managers had put all sensitive data in hers like "April 20th, call Linda to office to end her contract".
She had done this with 3 staff members and eventually one of them couldn't keep quiet.

Yeah, my old boss did that, sharing his OL calendar, and he was supposed to be the IT team leader lol. On his calendar, he wrote down his resignation date!
 
Assuming you were using your boss' account then how do you know he wasn't on the list of allowed users?

Since you said you can't access it anymore, how do you know it wasn't a temporary oversight with permissions? [i.e. the share was created but someone forgot to add the permissions]

It is a little rich to brand a network not secure based on one share being visible on one computer used by your boss. The only oversight I can think of, and this is again assuming you used your boss' account, is the fact you were using your boss' account and not one of your own.

In any case I would keep my mouth firmly shut.
 
Keep your mouth firmly shut.... We all have had a good snoop around stuff we shouldn't have.. this is no different.
 
Back
Top Bottom