tercopy Intan Jakarta, CNBC Indonesia - Mantan karyawan NCS asal India, Kandula Nagaraju (39), dilaporkan merusak sistem perusahaan setelah diberhentikan. Ia memanfaatkan akses lamanya untuk masuk ke sistem pengujian dan menghapus 180 server virtual perusahaan. Aksi tersebut menyebabkan kerugian besar bagi perusahaan teknologi yang berbasis di Singapura itu Karena perbuatannya, perusahaan ditaksir mengalami kerugian sekitar S$918.000 atau setara Rp11,1 miliar. Kasus ini pun berujung pada proses hukum, di mana pelaku dijatuhi hukuman penjara selama dua tahun delapan bulan. Dalam persidangan terungkap, pelaku merasa tidak terima atas pemutusan kontraknya. Ia mengaku kecewa karena merasa telah bekerja dengan baik selama bergabung di perusahaan tersebut. Melansir Channel News Asia , kontrak Kandula dengan NCS dihentikan pada Oktober 2022 karena kinerja yang buruk. Dia terakhir kali bekerja pada 16 November 2022. Menurut dokumen pengadilan, Kandula merasa bingung dan kesal ketika dia dipecat, karena dia merasa telah bekerja dengan baik dan memberikan kontribusi yang baik kepada NCS selama bekerja. Setelah keluar dari NCS, ia tidak memiliki pekerjaan lain di Singapura dan harus kembali ke India. Sekitar November 2021 hingga Oktober 2022, Kandula adalah bagian dari tim beranggotakan 20 orang yang mengelola sistem komputer jaminan kualitas (QA) di NCS. NCS adalah perusahaan yang menawarkan layanan informasi, komunikasi, dan teknologi. Sistem yang dikelola mantan tim Kandula digunakan untuk menguji perangkat lunak dan program baru sebelum diluncurkan. Dalam sebuah pernyataan kepada CNA pada Rabu, NCS mengatakan itu adalah "sistem pengujian mandiri". Ini terdiri dari sekitar 180 server virtual, dan tidak ada informasi sensitif yang disimpan di dalamnya. Setelah kontraknya diputus dan kembali di India, Kandula menggunakan laptopnya untuk mendapatkan akses ilegal ke sistem menggunakan kredensial login administrator. Dia melakukannya enam kali antara 6 Januari dan 17 Januari 2023. Pada Februari tahun itu, Kandula kembali ke Singapura setelah mencari pekerjaan baru. Dia menyewa kamar dengan mantan rekannya di NCS dan menggunakan jaringan Wi-Fi miliknya untuk mengakses sistem NCS satu kali pada tanggal 23 Februari 2023. Selama akses tidak sah dalam dua bulan itu, dia menulis beberapa skrip komputer untuk menguji apakah skrip tersebut dapat digunakan pada sistem untuk menghapus server. Pada Maret 2023, dia mengakses sistem QA NCS sebanyak 13 kali. Pada tanggal 18 dan 19 Maret, dia menjalankan skrip yang diprogram untuk menghapus 180 server virtual di sistem. Skripnya ditulis sedemikian rupa sehingga akan menghapus server satu per satu. Keesokan harinya, tim NCS menyadari bahwa sistem tidak dapat diakses dan mencoba memecahkan masalah, namun tidak berhasil. Mereka menemukan bahwa server telah dihapus. Pada 11 April 2023, laporan polisi dibuat dan beberapa alamat IP yang ditemukan melalui penyelidikan internal diserahkan kepada polisi. Laptop Kandula disita oleh polisi dan ditemukan skrip yang digunakan untuk melakukan penghapusan. Investigasi mengungkapkan bahwa dia telah mencari skrip di Google untuk menghapus server virtual, yang kemudian dia gunakan untuk mengkodekan skrip tersebut. Akibat perbuatannya, NCS mengalami kerugian sebesar S$917.832. Group Ib melaporkan hal serupa. Negligent and malicious insiders, along with attackers using stolen credentials, cost organizations an average of $19.5 million a year, according to the 2026 Cost of Insider Risks report from the Ponemon Institute . That is up from $17.4 million in the previous edition, and a 20 percent rise over two years. According to the 2026 Cost of Insider Risks report, sponsored by DTEX Systems, negligence and simple mistakes drive 53 percent of that annual cost, or $10.3 million per organization. Malicious acts such as sabotage, data theft, and fraud account for 27 percent, or $4.7 million. Howdengroup melaporkan hal serupa. Global cybersecurity company Fortinet’s report on security operations (SecOps) across Asia-Pacific highlights the growing concern of insider threats, particularly in Singapore, with 82% of respondents attributing this rise to remote work environments 2 . Negligence, responsible for 55% of insider threats 3 , often results from human errors such as misconfigurations, accidental data sharing, or breaches of security protocols. The largest IT outage in history which happened in July 2024 that had millions of Windows systems failing around the world, is an example of the devastating consequences that can be triggered by just a botched software update. Malicious intent accounts for 25% of insider threat incidents 5 , involving employees or authorised individuals who misuse access for harmful, unethical, or illegal activities—often disgruntled current or former employees exploiting their knowledge of organisational systems. Csoonline melaporkan hal serupa. A federal jury convicted Sohaib Akhter, 34, of Alexandria, Virgina, on charges of conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person. But according to documents from the case provided on the Free Law Project s archive of court data, The Court Listener, Muneeb is now trying to have the charges dismissed. According to the statement of facts Muneeb agreed to, but now disputes, he and his brother, Sohaib, worked for an unnamed company in Washington, DC that provided software and services to more than 45 US government agencies, including hosting data for some federal clients. On Feb 18, 2025, both brothers were terminated by the company after it discovered Sohaib had been convicted nine years earlier of a felony. Sei melaporkan hal serupa. Based on the information in our database about insiders who commit IT sabotage, 86% held technical positions, and the majority of the crimes used sophisticated technical means to harm the organization. Of those insiders, 90% had administrator or privileged access at their organization, and 75% of the organizations experienced disruptions in business operations. Organizational reputation was affected by IT sabotage at 28% of the organizations. India Times melaporkan hal serupa. Share An Indian national has been sentenced to two years and six months in prison for unauthorized access to computer material, which resulted in the deletion of 180 virtual servers, costing his former employer, NCS, nearly SGD 918,000 (Rs 5.66 crore), in retaliation for his dismissal. An Indian national has been sentenced to two years and six months in prison for unauthorized access to computer material, which resulted in the deletion of 180 virtual servers, costing his former employer, NCS, nearly SGD 918,000 (Rs 5.66 crore), in retaliation for his dismissal. A 39-year-old, a former employee of NCS, a well-known information communication and technology services provider, was found guilty of staging a cyber-attack on the company's quality assurance (QA) system after his firing. Image credit : Kandula Nagaraja was a member of a 20-person team in charge of maintaining NCS's quality assurance system | Image: Canva Kandula Nagaraja was a member of a 20-person team in charge of maintaining NCS's quality assurance system, which was used to test new software and applications. Channel News Asia melaporkan hal serupa. The 39-year-old man, who was "confused and upset" after being fired, deleted 180 virtual servers from NCS' computer system. Rachel Lim 11 Jun 2024 08:24PM (Updated: 12 Jun 2024 08:46PM) Bookmark Bookmark Share WhatsApp Telegram Facebook Twitter Email LinkedIn Set CNA as your preferred source on Google Add CNA as a trusted source to help Google better understand and surface our content in search results. Click here to return to FAST Tap here to return to FAST FAST SINGAPORE: Upset that he was fired, an employee accessed his former company’s computer test systems and deleted 180 virtual servers, costing them about S$918,000 (US$678,000). Kandula Nagaraju, 39, was sentenced to two years and eight months' jail on Monday (Jun 10) for one charge of unauthorised access to computer material. TechRadar melaporkan hal serupa. The affected servers, NCS says, were devoted to internal app testing, and so no sensitive customer data was lost in the attack. Tom s Hardware wrote recovery of the servers cost roughly S$678,000, but didn t share specific details on how this was done. It s a bit like a film, the way Tom s tells it: the QA team found that all of their test servers had been wiped in the space of one morning on March 20 2023. Speaking to Channel News Asia (CNA), a NCS spokesperson claimed that Nagaraju s access credentials remained active due to human oversight . BleepingComputer melaporkan hal serupa. A former quality assurance employee of National Computer Systems (NCS) was sentenced to two years and eight months in prison for reportedly deleting 180 virtual servers after being fired. Nagaraju Kandula, 39, pleaded guilty to deleting the virtual servers in an attempt to sabotage the firm's systems out of spite for getting fired from NCS, causing damages estimated to $678,000. It operates in over 20 cities across the Asia-Pacific region and employs 13,000 people. He was let go from his job on November 16, 2022, for poor performance, and the company overlooked that they had not invalidated his credentials, allowing him continued access to their systems. Hcamag melaporkan hal serupa. A disgruntled employee has been sentenced to over two years of jail time after he accessed and deleted the virtual servers of his former employer who terminated him, according to reports. Kandula Nagaraju, 39, was part of a 20-member team managing the quality assurance computer system at NCS, Channel News Asia reported. He was fired, however, in October 2022 due to poor work performance and had to return to India after not finding another job. According to the CNA report , Kandula unlawfully accessed the NCS system numerous times using his laptop in January when he returned to India. Group Ib melaporkan hal serupa. Credential theft accounts for the remaining 20 percent, or $4.5 million. Negligence costs have climbed 17 percent year on year, with the report tracing the increase to personal webmail, file-sharing sites, and unsanctioned AI tools. Group-IB s threat intelligence team recorded 2,337,460 compromised accounts across the Asia-Pacific region in February 2026 alone, with the Vidar infostealer accounting for close to half. Howdengroup melaporkan hal serupa. For example, a former employee of NCS, a multinational IT company, caused an estimated S$918,000 in damages after accessing and deleting 180 virtual servers following his termination. Making up 20% of insider threats 5 , credential theft occurs when external attackers use tactics like social engineering, brute force attacks, or credential stuffing to obtain legitimate user credentials. For instance, in April 2021, the Turkey-linked group COSMIC WOLF used stolen login details to access a cloud provider’s system, changing security settings to allow direct access from their own servers. 7 This underscores the notion that hackers often do not break in, but log in instead (using stolen credentials of unwary or collaborating users). Csoonline melaporkan hal serupa. In his statement of facts this year, Muneeb admitted to deleting 96 databases. While five minutes after they were fired in 2025, Sohaib s VPN was disconnected and he lost access to the hosting provider, his brother still had access. In the statement of facts, Muneeb agreed he stole copies of IRS information on a virtual machine that included federal tax information of 450 people. Muneeb also admitted that between May and December 2025, he committed fraud and stole credentials for the EEOC public portal in an attempt to access email and other online accounts of 4,500 people. India Times melaporkan hal serupa. Despite believing he had made good contributions during his tenure, Nagaraju was fired in October 2022 for poor performance, and his employment officially ended on November 16, 2022. Image credit : Between January 6 and January 17, 2023, Nagaraju accessed the system six times from India | Image: Canva According to court filings, Nagaraju was confused and upset about his discharge. Due to a lack of immediate job in Singapore, he returned to India, where he accessed NCS's system without authorization using administrator credentials. Between January 6 and January 17, 2023, Nagaraju accessed the system six times from India. Channel News Asia melaporkan hal serupa. His contract with NCS was terminated in October 2022 due to poor work performance and his official last date of employment was Nov 16, 2022. According to court documents, Kandula felt "confused and upset" when he was fired as he felt he had performed well and "made good contributions" to NCS during his employment. Between November 2021 and October 2022, Kandula was part of a 20-member team managing the quality assurance (QA) computer system at NCS. In a statement to CNA on Wednesday, NCS said it was a "standalone test system". TechRadar melaporkan hal serupa. That s all well and good, but you d think an IT firm would keep a closer eye on servers vital to the operation of an entire department, especially when CNA also reported that NCS suffered a total loss of S$917,832 thanks to their rogue ex-employee. BleepingComputer melaporkan hal serupa. According to news outlet CNA , who reviewed the court documents, Nagaraju used his non-invalidated account credentials at NCS between January and March 2023 to access NCS systems over thirteen times. During those events, the man reportedly tested custom scripts for his ability to wipe virtual servers managed by the quality assurance team. The wiper was executed on March 18-19, deleting 180 virtual servers and causing damages estimated to be $678,000. After the discovery of the damaging attack and the realization that the deleted servers could not be restored, NCS reported the incident to the police, who, on April 11, 2023, traced the action back to an IP address associated with Kandula. Hcamag melaporkan hal serupa. According to the report, he rented a room with a former NCS colleague and used his Wi-Fi network to enter the system . The report said Kandula wrote computer scripts between those two months to test if they could be used on the system to delete the servers. By March, he accessed the NCS system 13 more times, where he ran a programmed script to delete 180 virtual servers in the system. The NCS said the entire situation cost them about S$917,832 but assured that no sensitive information was stored on the servers. Csoonline melaporkan hal serupa. According to the State of Human Risk Report from Mimecast, 42% of organizations have experienced an increase in malicious insider incidents over the past year, with 42% also reporting a rise in negligent incidents for the first time. A report this year by the Ponemon Institute on the costs of insider risks, commissioned by insider threat detection provider DTEX, estimated incidents cost organizations an average of $19.5 million last year, up from $17.4 million in 2024. The biggest cause of losses last year (53%) was negligence and mistakes, it said. The second biggest cause, however, was malicious activity (27%). India Times melaporkan hal serupa. Also read: Singapore Boy Solves Rubik's Cube While Juggling In Just 10.43 Seconds, Watch Nagaraju returned to Singapore in February 2023, having secured a new position, and stayed with a former NCS colleague, utilizing their Wi-Fi network to access the system on February 23, 2023. The main damage was caused in March 2023 when Nagaraju accessed NCS's QA system 13 times, culminating in a two-day frenzy on March 18 and 19 during which he performed a designed script to painstakingly remove 180 virtual servers. Image credit : A police report was submitted on April 11, 2023 | Image: Canva A police report was submitted on April 11, 2023, and following investigations revealed many IP addresses associated with the sabotage. Despite knowing he was not permitted to access the system after his employment was terminated, Nagaraju proceeded with his conduct, resulting in a loss of SGD 917,832 to NCS. Channel News Asia melaporkan hal serupa. It consisted of about 180 virtual servers, and no sensitive information was stored on them. He did so on six occasions between Jan 6 and Jan 17, 2023. He rented a room with a former NCS colleague and used his Wi-Fi network to access NCS' system once on Feb 23, 2023. In March 2023, he accessed NCS' QA system 13 times. Csoonline melaporkan hal serupa. Musa Ishaq , senior principal insider threat analyst at DTEX, said last week s conviction is a clear and sobering reminder that termination is not the end of risk. India Times melaporkan hal serupa. Also read: 34 YO Singapore Influencer Becomes Grandmother, Fuels Debate On Early Parenthood Nagaraju was aware of his lack of authorization and still chose to access the system, resulting in substantial financial loss and operational disruption, declared the prosecuting attorney on Monday. Ao Ashi s2 ep 1: Ashito gets a brutal reality check after joining Team A By Nillohit Bagchi Trending Now Top 5 enemies to lovers anime: The most chaotic rival romances worth watching By Nillohit Bagchi Section Lifestyle Fashion Worth Entertainment Trending PopRant SportsRant AstroVibes Organisation About Us Work with Us Contact Us Terms Conditions Privacy Policy Editorial Policy Follow us Contact Plot No 391| Ecstasy IT Park Udyog Vihar Phase -3 Gurgaon -122016 CALL US +91 (0124) 4187000 grievance.it@timesinternet.in Channel News Asia melaporkan hal serupa. On Mar 18 and 19, he ran a programmed script to delete 180 virtual servers in the system. On Apr 11, 2023, a police report was made and several IP addresses uncovered by internal investigations were handed over to the police.
Fakta Kunci
- 1Ia memanfaatkan akses lamanya untuk masuk ke sistem pengujian dan menghapus 180 server virtual perusahaan.
- 2Aksi tersebut menyebabkan kerugian besar bagi perusahaan teknologi yang berbasis di Singapura itu Karena perbuatannya, perusahaan ditaksir mengalami kerugian sekitar S$918.000 atau setara Rp11,1 miliar.
- 3Melansir Channel News Asia , kontrak Kandula dengan NCS dihentikan pada Oktober 2022 karena kinerja yang buruk.
- 4Sekitar November 2021 hingga Oktober 2022, Kandula adalah bagian dari tim beranggotakan 20 orang yang mengelola sistem komputer jaminan kualitas (QA) di NCS.
Sumber Berita
CNBC Indonesia
Data dihimpun dari sumber berita terpercaya dan disajikan untuk tujuan informasi. Kunjungi tautan sumber untuk laporan lengkap.