I&#x27;ve had a similar experience at a start up I once worked at.<p>We hired our first network administrator to replace developers like me who had been doing the same sort of job.<p>The day that he started the job, we received an email that someone using our gateway IP address had posted to Usenet [this was a while back] the IP and root password of some other company&#x27;s public webserver, with a message to the effect that people should &quot;f--- it up&quot;.  The email also stated that the root password seemed to work, and we verified that.<p>We quickly worked out that the server was our new employee&#x27;s previous workplace, and we sacked him and walked him out <i>on the spot</i>.  He didn&#x27;t receive any pay or benefits.  We also documented everything on paper in case there was some legal problem (which didn&#x27;t happen, of course, but you never know with some people).<p>So my advice is:<p>* Document everything.  On real, physical paper.  Sign and date each page.<p>* Fire them, now.