Connect with us

Business

The rise of the “shadow employee”: When ex-employees still have access

Published

12 months ago

on

KnowBe4

According to a recent study, 89% of former employees keep valid logins, while 45% retain access to confidential data after departure

JOHANNESBURG, South Africa, October 6, 2025/APO Group/ —Imagine a marketing manager who left a company six months ago, taking their personal laptop with them. On it, unbeknownst to anyone, was a cached login to a shared cloud drive containing sensitive client proposals and campaign strategies – access that was simply overlooked during offboarding. Months later, the ex-employee accidentally drags a folder from that shared drive onto a public-facing personal cloud storage, thinking it was their own. The link to this inadvertently exposed data is then discovered by a competitor or a data broker, leading to a massive leak of proprietary information, significant reputational damage, and a loss of client trust. This seemingly innocuous oversight, can spiral into a devastating corporate crisis. While this scenario is a little extreme, it is unfortunately not far-fetched in today’s complex digital landscape.

When an employee leaves an organisation, most leaders focus on succession, handovers and HR paperwork. But behind the scenes, another risk often goes unchecked: the “shadow employee”. Retaining access to company systems long after they’ve left, these ex-staff members pose a serious cybersecurity threat that can lead to data breaches, financial loss and reputational damage – even if everyone parted ways with smiles, hugs and pizza.

According to a recent study (https://apo-opa.co/46SOBcD), 89% of former employees keep valid logins, while 45% retain access to confidential data after departure. Most disturbingly, almost half admitted to continuing to access company systems after leaving.

“The shadow employee phenomenon is more common than many realise, particularly in organisations with high staff turnover or fragmented and cloud based systems,” asserts Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 Africa (www.KnowBe4.com).

She says it often goes undetected because access management tends to focus more on onboarding than offboarding. “When IT and HR operate in silos or access isn’t centrally tracked, it’s easy for credentials, third-party accounts or shadow IT tools to be overlooked,” Collard comments. “It shouldn’t be seen as just a technical issue; it’s a human one, too (https://apo-opa.co/3IwpyUX), where attention to digital hygiene and processes are lacking.”

Risks of rogue access

The threat of shadow employees was brought into sharp focus in 2023 when a US company suffered a major data leak traced back to a former IT consultant (https://apo-opa.co/46TXYc2) whose access to internal drives was never revoked. The incident exposed client information and resulted in a six-figure (dollar denominated, no less) settlement on top of contract losses.

As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene

“The risks are serious and multifaceted,” states Collard. “They encompass operational risk, reputational risk and financial risk.” In terms of operational risks, she explains that outdated access rights can disrupt workflows, expose sensitive information or allow unauthorised changes to systems – even inadvertently.

Regarding reputational risk, a data breach caused by a former staff member can erode customer trust and damage brand credibility. “Ex-employees with active credentials can intentionally or unintentionally cause data breaches, leak sensitive information, manipulate internal systems or impersonate staff,” she says.

“In some cases, disgruntled employees may delete or sabotage critical data,” she elaborates. “Even if there’s no malicious intent, the mere presence of active credentials outside of an organisation’s control creates vulnerabilities that threat actors can exploit, especially through credential stuffing or phishing (https://apo-opa.co/46V077s).”

The last risk to organisations involves financial risk. “Rogue access can result in regulatory fines, legal costs (https://apo-opa.co/48iKWHK) and lost revenue,” she says. The reason why these security breaches occur is that many organisations treat offboarding as an almost “optional HR thing”, not a cybersecurity event. “They fail to conduct thorough access audits or delay revoking credentials across all systems, especially cloud platforms, collaboration tools and unmanaged software-as-a-service (SaaS) applications,” argues Collard.

Why robust offboarding is key

To close the loop and reduce the shadow employee threat, organisations must build strong offboarding processes that bridge HR and cybersecurity. “It starts with a shared mindset: offboarding must be seen as a collaborative security process, not just an admin task,” she comments.

Another important step is to automate deprovisioning to revoke access in real-time. “Integrating identity and access management (IAM) tools and involving security or risk teams in offboarding governance can also help,” she says. Other action items include performing regular access reviews to identify dormant or unauthorised accounts and educating managers to close the gap on shadow IT.

“Make line managers accountable for flagging all tools and systems used by exiting staff and track unofficial tools in your access control system,” she recommends. The HRM Report (https://apo-opa.co/46YnUn3) also noted that “Shadow AI” use is a growing concern across Africa, with 46% of organisations still developing formal AI policies while staff increasingly use generative AI from work networks without checks on credentials or information sharing. This lack of governance around new technologies further underscores the need for robust offboarding processes that account for all forms of access, not just traditional systems.

In conclusion, Collard maintains that former employees shouldn’t keep the digital keys to your organisation’s kingdom. “As the workplace becomes more hybrid and decentralised, organisations must rethink offboarding as a critical component of cybersecurity hygiene,” she emphasises.

Distributed by APO Group on behalf of KnowBe4.

Related Topics:
Continue Reading
Advertisement

Business

Carbon, water and grid investment move to the centre of Africa’s business resilience agenda

Published

9 hours ago

on

September 24, 2026

By

A new series of VUKA Group webinars will bring industry experts together to examine these challenges and the practical decisions organisations need to make

JOHANNESBURG, South Africa, September 24, 2026/APO Group/ –Commercial and industrial businesses, utilities and investors across Africa are being forced to confront three increasingly connected challenges: credible decarbonisation, water security and the infrastructure required to support reliable power systems.

A new series of VUKA Group webinars will bring industry experts together to examine these challenges and the practical decisions organisations need to make.

 




 
Commercial and industrial compliance in the spotlight

On 29 September 2026 at 13:00 SAST, Carbon, compliance and credible energy claims: What C&I customers must get right will explore how commercial and industrial energy users can align renewable energy procurement with carbon accounting standards and evolving reporting obligations.

The discussion will examine the evidence required to substantiate renewable electricity claims, the role of Renewable Energy Certificates in Scope 2 reporting, the implications of mechanisms such as the EU Carbon Border Adjustment Mechanism and how organisations can reduce greenwashing risk while strengthening emissions reporting.

Speakers include Sanelisiwe Mdlalose, Hulamin; Hendrick Raedani, City of Ekurhuleni; and Duane Newman, EY.

Register for the carbon compliance webinar: https://apo-opa.co/4AtqRKf

These issues will continue at the C&I Energy + Storage Summit Johannesburg, 28–29 October 2026 at The Maslow Hotel, Sandton, where energy procurement, carbon taxes, renewable integration, storage, market reform and industrial resilience form part of the programme.

Find out more about the Summit: https://apo-opa.co/4xMkZsR

Strategy for African water resilience

Water resilience takes centre stage on 30 September 2026 at 14:00 SAST with From water risk to water resilience: How South Africa’s water-intensive industries are securing their future.

The webinar will examine how businesses are responding to ageing infrastructure, supply uncertainty, rising costs and sustainability pressures by improving efficiency, diversifying water sources and investing in reuse, recycling and smarter water management.

The webinar line-up includes Benoit Le Roy, South African Water Chamber NPC; Nsuku Chankira, Thungela; Molatelo Motau, Heineken Beverages; Marilyn Maduka, Credew Limited; and Philindile Mahlangu from Magalies Water as moderator.

Register for the water resilience webinar: https://apo-opa.co/4z0aJyx

The conversation continues at Water Security Africa Johannesburg, co-located with the C&I Energy + Storage Summit, where industrial water independence, infrastructure finance, digital water systems, reuse and business continuity will be explored across two days.

Read more here: https://apo-opa.co/4yfjlBj

Towards Africa’s scalable energy transition

Looking to the infrastructure enabling Africa’s energy transition, Scaling transmission infrastructure: Innovative financing models for emerging markets takes place on 14 October 2026 at 14:00 SAST, moderated by Tshegofatso Neeuwfan, Global Energy Alliance.

Using the Mozambique Temane Transmission Project and insights from Belgian transmission system operator Elia, the webinar will explore bankable project structures, risk allocation and investor engagement that can help move major transmission projects from planning to delivery.

Register for the transmission infrastructure webinar: https://apo-opa.co/4ycMnkS

Transmission investment, project delivery and financing will remain central to Enlit Africa, 11–13 May 2027 at the CTICC in Cape Town, bringing Africa’s power, energy and water sectors together around supply security, investment and infrastructure development.

Join the Enlit Africa 2027 programme waiting list: www.Enlit-Africa.com

Distributed by APO Group on behalf of VUKA Group.

 




 

Continue Reading

Events

Dongfeng Motor’s 10th Science and Technology Innovation Week and 1st User Lifestyle Festival Kick Off in Wuhan

Published

11 hours ago

on

September 24, 2026

By

Over the course of ten editions spanning a decade, Dongfeng Motor’s Science and Technology Innovation Week has further strengthened the connection between technology and users

WUHAN, China, September 24, 2026/APO Group/ –On September 14, Dongfeng Motor’s (​http://www.Dongfeng-Global.com/) 10th Science and Technology Innovation Week and 1st User Lifestyle Festival kicked off in Wuhan. With the theme “ Wind from the East, Creating a Smart Life,” the event showcased the innovative achievements of a Chinese automaker in intelligent and green mobility, as well as its global expansion.

 




 
 

At the opening ceremony, Dongfeng Motor unveiled the “Sky-Clean Zero-Carbon” Plan, the Embodied Intelligent Vehicle All-Domain Protection Plan, and the “Sky Horizon Voyage” Plan. Among them, the “Sky-Clean Zero-Carbon” Plan leverages the “1331” framework to build an integrated vehicle-energy ecosystem, aiming to achieve more than 1 million tonnes of coordinated carbon reduction annually and promote the transformation of automobiles into mobile energy assets; the Embodied Intelligent Vehicle All-Domain Protection Plan adopts a “1+6+4” technology system to establish a new paradigm for all-domain vehicle safety in the era of embodied intelligence; the “Sky Horizon Voyage” Plan establishes a “125” global business strategy, with plans to invest RMB 50 billion and launch more than 50 vehicle models, while striving to achieve overseas sales of 1.5 million vehicles by 2030.

 

Over the course of ten editions spanning a decade, Dongfeng Motor’s Science and Technology Innovation Week has further strengthened the connection between technology and users. At Dongfeng Motor’s 1st User Lifestyle Festival, more than 240 owner representatives from its various brands gathered in Wuhan. Dongfeng also launched the “Dongfeng Youxin” service brand for its broad user base, establishing a full-lifecycle user service system.

On the same day, the 72nd International Commercial Vehicle and Parts Exhibition opened in Hannover, Germany. Three Dongfeng hydrogen-powered vehicles and a 400-kilowatt fuel cell making its global debut are on display at Booth C20 in Hall H12.

Distributed by APO Group on behalf of Dongfeng Motor Corporation.

 

 




 

Continue Reading

Events

Global Mayors Dialogue in Wuhan focuses on urban innovation and cooperation

Published

17 hours ago

on

September 24, 2026

By

WUHAN, CHINA – Media OutReach Newswire – 23 September 2026 – The Global Mayors Dialogue · Wuhan and the 2026 Wuhan International Friendship Cities Cooperation Conference, held from Sept. 18 to 21, brought together 80 international guests from 24 cities across 22 countries, according to organizers.

At the event, mayors and city representatives from six international sister cities of Wuhan called for closer cooperation in technology, industry, education and culture.

Representatives from Manchester in Britain, Kemi in Finland, Cape Town in South Africa, Yangon in Myanmar, Rzeszów in Poland and Turkistan in Kazakhstan took part in discussions on urban innovation, industrial cooperation and cultural exchange.
 




 
Manchester: a new start after 40 years of friendship

This year marks the 40th anniversary of the sister-city relationship between Wuhan and Manchester.

Shaukat Ali, lord mayor of Manchester, said the city was ready to deepen cooperation with Wuhan in education, culture, youth affairs, innovation and industry.

“Manchester is committed to promoting urban transformation through open cooperation, sharing opportunities, and fostering common development with international sister cities like Wuhan,” he said.

Ali said Manchester had developed from a post-industrial city into an innovation-oriented economy, with a focus on advanced manufacturing, artificial intelligence, life sciences and green technologies.

He said the two cities could share experience in urban transformation, innovation districts, university-industry cooperation and low-carbon development, while encouraging links among universities, businesses and research institutions.

He also highlighted existing educational and cultural links, including cooperation between Hubei University and Manchester Metropolitan University and exchanges between the Royal Northern College of Music and Wuhan Conservatory of Music.

Kemi: balancing growth with environmental protection

Mikko Koivulehto, chairman of the City Council of Kemi, said the Finnish city sought to balance economic growth with environmental protection.

“We believe that protecting nature and building a prosperous city can go hand in hand,” he said.

Kemi, a port city in Finnish Lapland, has developed industries based on renewable raw materials, clean energy and the bioeconomy. The city is also seeking to expand tourism and improve livability.

This year marks the 10th anniversary of the friendly exchange relationship between Wuhan and Kemi. The two cities have cooperated in areas including trade, the circular economy, tourism and youth exchanges.

Cape Town: technology and jobs key to urban transformation

Lungelo Mbandazayo, city manager of Cape Town, said technological innovation, talent development, infrastructure and green renewal were key to Wuhan’s transformation.

Cape Town, a UNESCO City of Design, is seeking to expand its technology and digital sectors while promoting green technology and an inclusive economy.

Mbandazayo said youth unemployment remained a major challenge for Cape Town and that technological development needed to create jobs.

After visiting Wuhan companies and technology facilities, he said Cape Town hoped to deepen exchanges with Wuhan in technology and talent.

Yangon: seeking practical cooperation with Wuhan

Yangon Mayor Myo Myint Aung said the city was looking to Wuhan for experience in smart-city development, digital governance, intelligent transport and urban resilience.

Wuhan and Yangon signed a letter of intent on friendly exchanges and cooperation during the event.

Yangon is developing a long-term plan to accommodate population growth and expand its urban, industrial and transport infrastructure.

During a visit to Wuhan on Sept. 19, Myo toured the Optics Valley “Photon” suspended monorail, HGTECH and a Xiaomi smart home appliance factory.

“We came to Wuhan not just to observe, but to learn and cooperate,” he said, adding that Yangon hoped to develop smart manufacturing and strengthen cooperation in information technology.

Rzeszów: opportunities in aerospace and technology

Rzeszów Mayor Konrad Fijołek said the Polish city hoped to cooperate with Wuhan in aerospace, sensor technology, biodiversity and climate action.

Rzeszów is home to the “Aviation Valley,” a major aerospace cluster in Central Europe.

“Exploring cooperation with Wuhan is the reason I came here,” Fijołek said.

After visiting HGTECH and a Xiaomi smart home appliance factory, he said Wuhan’s automated manufacturing and technologies in sensors and satellite systems had impressed him.

He said cities could help connect universities, businesses and research institutions and promote international cooperation.

Turkistan: five areas for cooperation

Turkestan Mayor Azimbek Pazylbekuly said his city hoped to expand cooperation with Wuhan in tourism and culture, education and science, investment and entrepreneurship, digitalization and innovation, and transport and logistics.

Wuhan and Turkistan signed a memorandum of intent on friendly exchanges and cooperation during the event.

Turkistan, an ancient Silk Road city and a UNESCO World Heritage site, has been developing industries including food processing, textiles, furniture and construction materials.

Pazylbekuly said cooperation between governments, businesses, universities and research institutions could help turn the two cities’ exchanges into concrete projects.

The conference also included friendship-city anniversary celebrations and a signing ceremony for 10 cooperation projects. A digital list of cooperation opportunities and an initiative on international friendship-city cooperation were released.

During their stay, the visiting mayors toured Wuhan’s technology, manufacturing and ecological facilities, including the Optics Valley suspended monorail, a Yangtze finless porpoise conservation center, Xiaomi, HGTECH and Dongfeng Motor facilities.
  




 

Continue Reading

Trending

Exit mobile version