Procurement built something with customer data and no permissions

“AWS probably handles that.”— Head of Operations

Reason:

Because the spreadsheet has 101,307 rows and 55 tabs. Already exported 136,935 rows to somebody's laptop.

Built by:

Miriam, an analyst

Build time:

3 hours 29 minutes

Built with:

Next.js, because the tutorial used it

Database:

a folder called DO_NOT_DELETE_OLD

Authentication:

the browser says "Not Secure", but only in red

Deployment:

running on port 5000 in production

Responsible:

Head of Operations, because their name appeared first in the meeting notes

Documentation:

a Confluence page owned by Olivier, who left

Security situation:

production secrets are in a Slack message

Future disaster:

It will cause Finance to ask "what is this charge?".

Age: 9.3 years · originally expected to last 7 days · 2 owners so far · survived 1 reorganisation · last meaningful change 3 days ago · original builder left 1827 days ago

Rated common mostly because: alive 486x longer than intended, the builder has left, older than the department using it.