Connect with us
Anglostratits

Business

The rise of the “shadow employee”: When ex-employees still have access

Published

4 months ago

on

KnowBe4

According to a recent study, 89% of former employees keep valid logins, while 45% retain access to confidential data after departure

JOHANNESBURG, South Africa, October 6, 2025/APO Group/ —Imagine a marketing manager who left a company six months ago, taking their personal laptop with them. On it, unbeknownst to anyone, was a cached login to a shared cloud drive containing sensitive client proposals and campaign strategies – access that was simply overlooked during offboarding. Months later, the ex-employee accidentally drags a folder from that shared drive onto a public-facing personal cloud storage, thinking it was their own. The link to this inadvertently exposed data is then discovered by a competitor or a data broker, leading to a massive leak of proprietary information, significant reputational damage, and a loss of client trust. This seemingly innocuous oversight, can spiral into a devastating corporate crisis. While this scenario is a little extreme, it is unfortunately not far-fetched in today’s complex digital landscape.

When an employee leaves an organisation, most leaders focus on succession, handovers and HR paperwork. But behind the scenes, another risk often goes unchecked: the “shadow employee”. Retaining access to company systems long after they’ve left, these ex-staff members pose a serious cybersecurity threat that can lead to data breaches, financial loss and reputational damage – even if everyone parted ways with smiles, hugs and pizza.

According to a recent study (https://apo-opa.co/46SOBcD), 89% of former employees keep valid logins, while 45% retain access to confidential data after departure. Most disturbingly, almost half admitted to continuing to access company systems after leaving.

“The shadow employee phenomenon is more common than many realise, particularly in organisations with high staff turnover or fragmented and cloud based systems,” asserts Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 Africa (www.KnowBe4.com).

She says it often goes undetected because access management tends to focus more on onboarding than offboarding. “When IT and HR operate in silos or access isn’t centrally tracked, it’s easy for credentials, third-party accounts or shadow IT tools to be overlooked,” Collard comments. “It shouldn’t be seen as just a technical issue; it’s a human one, too (https://apo-opa.co/3IwpyUX), where attention to digital hygiene and processes are lacking.”

Risks of rogue access

The threat of shadow employees was brought into sharp focus in 2023 when a US company suffered a major data leak traced back to a former IT consultant (https://apo-opa.co/46TXYc2) whose access to internal drives was never revoked. The incident exposed client information and resulted in a six-figure (dollar denominated, no less) settlement on top of contract losses.

As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene

“The risks are serious and multifaceted,” states Collard. “They encompass operational risk, reputational risk and financial risk.” In terms of operational risks, she explains that outdated access rights can disrupt workflows, expose sensitive information or allow unauthorised changes to systems – even inadvertently.

Regarding reputational risk, a data breach caused by a former staff member can erode customer trust and damage brand credibility. “Ex-employees with active credentials can intentionally or unintentionally cause data breaches, leak sensitive information, manipulate internal systems or impersonate staff,” she says.

“In some cases, disgruntled employees may delete or sabotage critical data,” she elaborates. “Even if there’s no malicious intent, the mere presence of active credentials outside of an organisation’s control creates vulnerabilities that threat actors can exploit, especially through credential stuffing or phishing (https://apo-opa.co/46V077s).”

The last risk to organisations involves financial risk. “Rogue access can result in regulatory fines, legal costs (https://apo-opa.co/48iKWHK) and lost revenue,” she says. The reason why these security breaches occur is that many organisations treat offboarding as an almost “optional HR thing”, not a cybersecurity event. “They fail to conduct thorough access audits or delay revoking credentials across all systems, especially cloud platforms, collaboration tools and unmanaged software-as-a-service (SaaS) applications,” argues Collard.

Why robust offboarding is key

To close the loop and reduce the shadow employee threat, organisations must build strong offboarding processes that bridge HR and cybersecurity. “It starts with a shared mindset: offboarding must be seen as a collaborative security process, not just an admin task,” she comments.

Another important step is to automate deprovisioning to revoke access in real-time. “Integrating identity and access management (IAM) tools and involving security or risk teams in offboarding governance can also help,” she says. Other action items include performing regular access reviews to identify dormant or unauthorised accounts and educating managers to close the gap on shadow IT.

“Make line managers accountable for flagging all tools and systems used by exiting staff and track unofficial tools in your access control system,” she recommends. The HRM Report (https://apo-opa.co/46YnUn3) also noted that “Shadow AI” use is a growing concern across Africa, with 46% of organisations still developing formal AI policies while staff increasingly use generative AI from work networks without checks on credentials or information sharing. This lack of governance around new technologies further underscores the need for robust offboarding processes that account for all forms of access, not just traditional systems.

In conclusion, Collard maintains that former employees shouldn’t keep the digital keys to your organisation’s kingdom. “As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene,” she emphasises.

Distributed by APO Group on behalf of KnowBe4.

Related Topics:
Continue Reading
Advertisement

Events

As global power structures shift, Invest Africa convenes The Africa Debate 2026 to redefine partnership in a changing world

Published

2 days ago

on

February 6, 2026

By

Debate

The Africa Debate 2026 will provide a platform for this essential, era-defining discussion, convening leaders to explore how Africa and its partners can build more balanced, resilient and sustainable models of cooperation

LONDON, United Kingdom, February 5, 2026/APO Group/ –As African economies assert greater agency in a rapidly evolving global order, Invest Africa (www.InvestAfrica.com) is delighted to announce The Africa Debate 2026, its flagship investment forum, taking place at the historic Guildhall in London on 3 June 2026.

Now in its 12th year, The Africa Debate has established itself as London’s premier platform for African investment dialogue since launching in 2014, convening over 800 global decision-makers annually to shape the future of trade, finance, investment, and development across the continent.

Under the theme “Redefining Partnership: Navigating a World in Transition”, this year’s forum will focus on Africa’s response to global economic realignment with greater agency, ambition and economic sovereignty.

The Africa Debate puts Africa’s priorities at the centre of the conversation, moving beyond traditional narratives to focus on ownership, resilience and long-term value creation.

“Volatility is not new to Africa. What is changing is the opportunity to respond with greater agency and ambition,” says Invest Africa CEO Chantelé Carrington.

“This year’s edition of The Africa Debate asks how we strengthen economic sovereignty — from access to capital and investment to financial and industrial policy — so African economies can take greater ownership of their growth. Success will be defined by how effectively we turn disruption into leverage and partnership into shared value.”

The Africa Debate 2026 will provide a platform for this essential, era-defining discussion, convening leaders to explore how Africa and its partners can build more balanced, resilient and sustainable models of cooperation.

Key challenges driving the debate

Core focus areas for this year’s edition of The Africa Debate include:

This year’s edition of The Africa Debate asks how we strengthen economic sovereignty — from access to capital and investment to financial and industrial policy

Global Realignment & New Partnerships

How shifting geopolitical and economic power structures are reshaping Africa’s global partnerships, trade dynamics and investment landscape.

Financing Africa’s Future

The growing need to reform the global financial architecture, new approaches to development finance, as well as the strengthening of market access and financial resilience of African economies in a changing global system.

Strategic Value Chains

Moving beyond primary exports to build local value chains in critical minerals for the green economy. Also addressing Africa’s energy access gap and mobilising investment in renewable and transitional energy systems.

Digital Transformation & Technology

Unlocking growth in fintech, AI and digital infrastructure to drive productivity, inclusion, and the next phase of Africa’s economic transformation.

The Africa Debate 2026 offers a unique platform for high-level dialogue, deal-making, and strategic engagement. Attendees will gain actionable insights from leading policymakers, investors and business leaders shaping Africa’s economic future, while building strategic partnerships that define the continent’s next growth phase.

Registration is now open (http://apo-opa.co/46b19gj).

Distributed by APO Group on behalf of Invest Africa.

Continue Reading

Business

Zion Adeoye terminated as Chief Executive Officer (CEO) of CLG due to serious personal and professional conduct violations

Published

2 days ago

on

February 6, 2026

By

CLG

After a thorough internal and external investigation, along with a disciplinary hearing chaired by Sbongiseni Dube, CLG (https://CLGglobal.com) has made the decision to terminate Zion Adeoye due to serious personal and professional conduct violations. This process adhered to the Code of Good Practice of the Labour Relations Act, ensuring fairness, transparency, and compliance with South African law.

Mr. Adeoye has been held accountable for several serious offenses, including:

  • Making malicious and defamatory statements against colleagues
  • Extortion
  • Intimidation
  • Fraud
  • Misuse of company funds
  • Theft and misappropriation of funds
  • Breach of fiduciary duty
  • Mismanagement

His actions are in direct contradiction to our firm’s core values. We do not approve of attorneys spending time in a Gentleman’s Club. CLG deeply regrets the impact this situation has had on our colleagues and continues to provide full support to those affected.

We want to express our gratitude to those who spoke up and to reassure everyone at the firm of our unwavering commitment to maintaining a respectful workplace. Misconduct of any kind is unacceptable and will be addressed decisively.

We recognize the seriousness of this matter and have referred it to the appropriate law enforcement, regulatory, and legal authorities in Nigeria, Mauritius, and South Africa. We kindly ask that the privacy of the third party involved be respected.

Distributed by APO Group on behalf of CLG.

 

Continue Reading

Business

The International Islamic Trade Finance Corporation (ITFC) Strengthens Partnership with the Republic of Djibouti through US$35 Million Financing Facility

Published

2 days ago

on

February 6, 2026

By

ITFC

This facility forms part of the US$600 million, three-year Framework Agreement signed in May 2023 between ITFC and the Republic of Djibouti, reflecting the strong and growing partnership between both parties

JEDDAH, Saudi Arabia, February 5, 2026/APO Group/ –The International Islamic Trade Finance Corporation (ITFC) (https://www.ITFC-IDB.org), a member of the Islamic Development Bank (IsDB) Group, has signed a US$35 million sovereign financing facility with the Republic of Djibouti to support the development of the country’s bunkering services sector and strengthen its position as a strategic regional maritime and trade hub.

The facility was signed at the ITFC Headquarters in Jeddah by Eng. Adeeb Yousuf Al-Aama, Chief Executive Officer of ITFC, and H.E. Ilyas Moussa Dawaleh, Minister of Economy and Finance in charge of Industry of the Republic of Djibouti.

The financing facility is expected to contribute to Djibouti’s economic growth and revenue diversification by reinforcing the competitiveness and attractiveness of the Djibouti Port as a “one-stop port” offering comprehensive vessel-related services. With Red Sea Bunkering (RSB) as the Executing Agency, the facility will support the procurement of refined petroleum products, thus boosting RSB’s bunkering operations, enhancing revenue diversification, and consolidating Djibouti’s role as a key logistics and trading hub in the Horn of Africa and the wider region.

We look forward to deepening this partnership, creating new opportunities, and leveraging collaborative programs to advance key sectors and drive sustainable economic growth

Commenting on the signing, Eng. Adeeb Yousuf Al-Aama, CEO of ITFC, stated:

“This financing reflects ITFC’s continued commitment to supporting Djibouti’s strategic development priorities, particularly in strengthening energy security, port competitiveness, and trade facilitation. We are proud to deepen our partnership with the Republic of Djibouti and contribute to sustainable economic growth and regional integration.”

H.E. Ilyas Moussa Dawaleh, Minister of Economy and Finance in charge of Industry of the Republic of Djibouti, commented: “Today’s signing marks an important milestone in the development of Djibouti’s bunkering services and reflects our strong and valued partnership with ITFC, particularly in the oil and gas sector. This collaboration supports our ambition to position Djibouti as a regional hub for integrated maritime and logistics services. We look forward to deepening this partnership, creating new opportunities, and leveraging collaborative programs to advance key sectors and drive sustainable economic growth.”

This facility forms part of the US$600 million, three-year Framework Agreement signed in May 2023 between ITFC and the Republic of Djibouti, reflecting the strong and growing partnership between both parties.

Since its inception in 2008, ITFC and the Republic of Djibouti have maintained a strong partnership, with a total of US$1.8 billion approved primarily supporting the country’s energy sector and trade development objectives.

Distributed by APO Group on behalf of International Islamic Trade Finance Corporation (ITFC).

Continue Reading

Trending