You leave a job, you keep the keys to your office, your employer forgets to take them back, <i>you then deliberately copy the keys and hand them out to vandals</i>. What court in the world would put any of the responsibility for that on the company?<p>Trib didn&#x27;t spend millions in cleanup, but if any breach investigation were done --- to rule out the attackers having done things to retain access after credentials were revoked, and to ensure Trib&#x27;s clients that no PII was taken --- would easily run into the mid tens of thousands.