Quality Assurance built a GDPR request tracker, ironically unsecured

“We only need it for this quarter.”— Sofia, Quality Assurance

Reason:

Mainly because the documentation describes a button that no longer exists. Already exported 138,029 rows to somebody's laptop.

Built by:

Sofia, a field technician

Build time:

3 hours 3 minutes

Built with:

Power Apps, licensed to one employee

Database:

a Postgres replica that accidentally became primary

Authentication:

email magic links to Lukas's personal Gmail

Deployment:

running on a laptop with 6% battery

Responsible:

the person sitting closest to the printer

Documentation:

a PDF containing screenshots of the old UI

Security situation:

every error response includes the full stack trace

Future disaster:

It will cause Finance to ask "what is this charge?".

Age: 32 days · originally expected to last 2 months · 1 owner so far · survived 1 reorganisation · last meaningful change 32 days ago · original builder left 41 days ago

Rated common mostly because: €433k per year, 2 accidental connections, the builder has left.