"A US municipality suffered a security breach because a former employee's account was not disabled. The attacker gained domain admin and SCADA access, potentially endangering the water supply. Security experts emphasize the necessity of quarterly access reviews and deprovisioning."