At a previous company we fired an analyst. This person had been combative from the day the company I worked for aquired the company he did. When asked to simply show us his reports the first day we met with him he refused saying he "wasn't prepared to show us the secret sauce yet, he wanted his job security". Unsurprisingly it wasn't long before he was fired.
As was standard practice IT was given a heads up with a time. His manager would call him into his office at X time and by the time he left that meeting he'd be locked out of his computer and all his accounts.
Well his manager decided there was no point waiting and he might as well just do it, so several hours before the appointed time, he did. The analyst asked if he could get some personal files off his laptop, the manager agreed, and the analyst proceeded to delete everything he had ever worked on, from SharePoint and every PowerBI report he could including emptying the recycle bin, with his (now ex) manager sitting across the table from him.
Needless to say I got a very excited call from our management. Only nice thing I will ever say about SharePoint, once I worked out it was a thing recovering everything from the second stage recycle bin was pretty easy. I then pulled audit logs showing him deleting everything and let management know I had them anytime they wanted to pursue legal action.
The day I left the company those audit logs were still on my desktop never having been requested.
Maybe not quite "getting away with it" in that I was able to undo the damage, but pretty brazen and to my knowledge never faced any consequences.
As was standard practice IT was given a heads up with a time. His manager would call him into his office at X time and by the time he left that meeting he'd be locked out of his computer and all his accounts.
Well his manager decided there was no point waiting and he might as well just do it, so several hours before the appointed time, he did. The analyst asked if he could get some personal files off his laptop, the manager agreed, and the analyst proceeded to delete everything he had ever worked on, from SharePoint and every PowerBI report he could including emptying the recycle bin, with his (now ex) manager sitting across the table from him.
Needless to say I got a very excited call from our management. Only nice thing I will ever say about SharePoint, once I worked out it was a thing recovering everything from the second stage recycle bin was pretty easy. I then pulled audit logs showing him deleting everything and let management know I had them anytime they wanted to pursue legal action.
The day I left the company those audit logs were still on my desktop never having been requested.
Maybe not quite "getting away with it" in that I was able to undo the damage, but pretty brazen and to my knowledge never faced any consequences.