It's generally a good idea that, if you're going to fire someone with any sort of computer access, you should revoke their credentials before telling them they're fired. But what do government contractors know?
Ars Technica, 2026-05-12, "Twin brothers wipe 96 gov't databases minutes after being fired": https://arstechnica.com/tech-policy/2026/05/drop-database-what-not-to-do-after-losing-an-it-job/
So how were they caught, in spite of their former employer's huge mistakes? "BLUNDER TWIN POWERS, ACTIVATE!"
Ars Technica, 2026-05-14, "Fired hacker twins forget to end Teams recording, capture own crimes": https://arstechnica.com/tech-policy/2026/05/fired-hacker-twins-forget-to-end-teams-recording-capture-own-crimes/