← Back
App #1257 · 🇺🇸 the United States
Disaster score 183Common
A Committee With No Budget built a GDPR request tracker, ironically unsecured
☠️ No known owner🧟 Builder has left
Users12
Departments0
Criticality3%
Money involvedunknown
“We'll migrate it eventually.”— Chen, A Committee With No Budget
- Reason:
- Honestly? Because the dashboard is updated manually every Thursday. With 2 tests, all skipped.
- Built by:
- Chen, a key account manager
- Build time:
- a long Thursday
- Built with:
- Excel macros, exposed over HTTP
- Database:
- an API that returns CSV
- Authentication:
- the password manager is memory
- Deployment:
- deployed from a branch called final
- Responsible:
- a shared mailbox nobody reads
- Documentation:
- a PowerPoint from 2022 labelled FINAL
- Security situation:
- the firewall rule is labelled TEMP
- Future disaster:
- It will duplicate every record after a timezone change.
Accidentally connected to (1)
- → calls an undocumented endpoint in the ERP
Age: 2.4 years · originally expected to last 2 months · 2 owners so far · survived 1 reorganisation · last meaningful change 420 days ago · original builder left 366 days ago
Rated common mostly because: nobody owns it, the builder has left, alive 15x longer than intended.
Current owner
Nobody has taken responsibility for this disaster.
Claim responsibility