A Committee With No Budget built a GDPR request tracker, ironically unsecured

“We'll migrate it eventually.”— Chen, A Committee With No Budget

Reason:

Honestly? Because the dashboard is updated manually every Thursday. With 2 tests, all skipped.

Built by:

Chen, a key account manager

Build time:

a long Thursday

Built with:

Excel macros, exposed over HTTP

Database:

an API that returns CSV

Authentication:

the password manager is memory

Deployment:

deployed from a branch called final

Responsible:

a shared mailbox nobody reads

Documentation:

a PowerPoint from 2022 labelled FINAL

Security situation:

the firewall rule is labelled TEMP

Future disaster:

It will duplicate every record after a timezone change.

Age: 2.4 years · originally expected to last 2 months · 2 owners so far · survived 1 reorganisation · last meaningful change 420 days ago · original builder left 366 days ago

Rated common mostly because: nobody owns it, the builder has left, alive 15x longer than intended.