Sharing isn’t caring if it’s an admin password

A company reused the weak administrative password “admin123” across staging and production and posted it in Slack; a former contractor later used that credential to access systems and accidentally (or intentionally) wiped all data. The article highlights this as a human-factor security failure, notes the company had spent on security tools but lacked basic credential hygiene, and reports the vendor implemented forced credential rotation and role-based access—reducing unauthorized access attempts by 60%—while recommending MFA and passkeys.