Every employee’s password was stored in a single Excel file

The report describes incidents where insecure practices—specifically a CEO storing all employee login credentials in an unprotected Excel file and opposing multi-factor authentication—led to security failures, including a prior ransomware event and subsequent data breaches; it recommends using administrative controls for mailbox management and enabling MFA (preferably with passkeys).