# Company Wrote Employees' Login Credentials on Sticky Notes IT department's security scandal: User credentials were left in plain sight. - **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1) - **Published:** 2026-08-06 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/cc734bf7-c09e-4c72-923a-beef46bf1c95 ## Major Mistake Despite Security Policy Despite having a strong password policy and security training, the IT department ignored basic security rules. While preparing old laptops for new employees during an office move, they stuck Post-it notes on each laptop containing the employee's name and login credentials. This meant user information was left where anyone could see it. ## How the Security Breach Occurred The laptops were stored in a conference room during the office relocation. During this time, anyone with access to the room could see the Post-it notes on the laptops. Indeed, a contractor entered the room and took photos of the notes. Later, they used this information to log in remotely and access proprietary data on the company's shared drives. ## The IT Department's Role The most shocking aspect of this incident was that the IT department caused the data leak. Those responsible for security should never leave passwords, even temporary ones, exposed. IT staff should transmit user credentials through encrypted channels and ensure only the intended recipient can access them. ## Security Risks of Post-It Notes Post-it notes are one of the riskiest methods for sharing user credentials. These notes can easily be lost or fall into the wrong hands. Additionally, even IT staff should not know user passwords. Such practices indicate a weak security culture within the company. ## Potential Consequences This security breach could have led to the leakage of sensitive company data and potentially significant financial losses. The company's reputation could also have been severely damaged. Preventing such breaches requires employee awareness and the adoption of more secure methods. ## Secure Alternatives Instead of Post-it notes, companies should use encrypted emails or secure messaging apps to share user credentials. Systems that ensure only the intended recipient can view temporary passwords should also be preferred. Such measures can prevent similar security vulnerabilities. ## The Importance of Security Culture This incident highlights the need for companies to review their security culture. IT departments must consistently enforce security policies and continuously educate employees. Security is not just about policies but also daily practices. ## Lessons Learned This case serves as a reminder that security breaches can come from the most unexpected places. Companies must strictly implement security measures and educate their employees. Even seemingly small mistakes can have major consequences. Security should always be a priority. ## Sources covering this story - https://www.theregister.com/security/2026/08/06/it-department-put-sticky-notes-on-the-laptops-to-help-employees-log-in/5283662 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._