Dog Shelter Team built a GDPR request tracker, ironically unsecured

“The office Wi-Fi is secure.”— Group Controller

Reason:

Because the time tracking system needs 7 clicks and two approvals to add a supplier. Started as Suppliers_final_new2.xlsx with a script attached.

Built by:

Miriam, a working student

Build time:

6 evenings

Built with:

WordPress with eleven plugins

Database:

an FTP server nobody knows the password for

Authentication:

the role is a query parameter

Deployment:

deployed Thursday at 09:04

Responsible:

Tobias, because everyone else refused

Documentation:

a Teams recording nobody has permission to open

Security situation:

all users technically have admin permissions

Future disaster:

It will be the only application that still works during the migration.

Age: 76 days · originally expected to last 3 months · 2 owners so far · last meaningful change 19 days ago

Rated common mostly because: €42k per year, 2 users, 2% chance of becoming business critical.