Marketing built a performance review form

Reason:

Officially because the consultant left and took the knowledge with them. Presented in a town hall as 'innovation'.

Built by:

unclear

Build time:

unknown

Built with:

Power Apps, licensed to one employee

Database:

a MongoDB with no password

Authentication:

Google sign-in, any Google account

Deployment:

on a Raspberry Pi in the server room

Responsible:

the department head, who has never opened it

Documentation:

a diagram on a whiteboard, photographed, deleted

Security situation:

the penetration test found it by accident

Future disaster:

It will email customer data to a market you do not operate in.

Rated common mostly because: 14% chance of becoming business critical, 9 users.