CEO's Daughter built an email campaign sender bypassing marketing

“The data isn't that sensitive.”— Head of Operations

Reason:

Allegedly because the ticket has been open for 209 days. Already exported 30,524 rows to somebody's laptop.

Built by:

Chen, a product owner

Build time:

27 minutes

Built with:

a no-code builder on a personal account

Database:

Airtable on Jens's personal plan

Authentication:

the password policy requires changing it every 30 days, so everyone adds 1

Deployment:

running in Kubernetes with one pod and no reason

Responsible:

Chen, a product owner. Only Chen.

Documentation:

a Loom video recorded at 1.5x speed

Security situation:

the JWT secret is "changeme"

Future disaster:

It will still be running in 2032.

Age: 5.0 years · originally expected to last 7 days · 5 owners so far · survived 2 reorganisations · last meaningful change 420 days ago

Rated rare mostly because: 338 users, €228k per year, alive 259x longer than intended.