โ† Back
๐Ÿฅท Steal it
App #28 ยท ๐Ÿ‡ฌ๐Ÿ‡ง the United Kingdom
Disaster score 570Legendary

Marketing built an email campaign sender bypassing marketing

โ˜ ๏ธ No known owner๐ŸงŸ Builder has left๐Ÿ’€ Direct production access
Users31
Departments0
Criticality41%
Money involvedโ‚ฌ186,375/yr
โ€œWe'll document it after the quarter.โ€โ€” HR Generalist
Reason:
Officially because two teams disagreed about a column name for 11 weeks. With a logo generated at 11:40.
Built by:
Miriam, someone from Procurement
Build time:
3 evenings
Built with:
Svelte, which nobody else here writes
Database:
the production database, directly, with write access
Authentication:
IP allow-list containing 0.0.0.0/0
Deployment:
hosted on a cloud account costing โ‚ฌ29.80/month
Responsible:
an external agency with no contract on file
Documentation:
a Slack thread from September
Security situation:
the data protection officer does not know it exists
Future disaster:
It will break the day Miriam changes their password.

Accidentally connected to (3)

  • โ†’ scrapes another internal app
  • โ†’ syncs with Budget2026_final.xlsx on a shared drive
  • โ†’ calls the production API with an admin token

Age: 96 days ยท originally expected to last 2 months ยท 1 owner so far ยท survived 1 reorganisation ยท last meaningful change 19 days ago ยท original builder left 67 days ago

Rated legendary mostly because: โ‚ฌ186k per year, 3 accidental connections, 41% chance of becoming business critical.

โ€œYea...wasnt me!โ€

Current price: $1. Taken over 1 time.

Steal this mistake โ€” $2

History of responsibility

Spin the wheel