---
title: The Scourge of Orphaned Accounts
description: Orphaned and forgotten accounts are an open invitation to hackers and malicious users. This article described orphaned accounts and their security risks.
image: https://blog.tuebora.com/hubfs/orpahnedaccount.jpg
---
[](https://tuebora.com/)
[](https://tuebora.com/)
[](https://tuebora.com/)
- Platform
[IVIP (Identity Visibility & Intelligence Platform) New The intelligence spine of Tuebora](https://tuebora.com/platform/ivip) [Tuebora Studio New The design plane for IAM - the "Cursor" for IAM](https://tuebora.com/platform/studio) [AI Agent Framework New Policy-bound AI agents that execute identity workflows with governance](https://tuebora.com/platform/ai-agent-framework) [Experience & Interaction Layer Role-based interfaces and conversational access for every stakeholder](https://tuebora.com/platform/experience-layer)
- Solutions
Core Governance
[Access Governance Unified requests, reviews, and controls with continuous monitoring](https://tuebora.com/solutions/access-governance) [Identity Lifecycle Management Automate joiner, mover, and leaver processes with policy-driven governance](https://tuebora.com/solutions/lifecycle-management) [Compliance & Audit Continuous compliance with automated evidence and real-time visibility](https://tuebora.com/solutions/compliance-audit)
Advanced & AI-Driven
[Non-Human & AI Identity Governance New Govern machine, application, and AI identities with full lifecycle control](https://tuebora.com/solutions/non-human-identity-governance) [AI Agent Governance New Policy-driven control for what AI agents can access, decide, and execute](https://tuebora.com/solutions/ai-agent-governance) [Conversational Access (AskTuebora) Request, approve, and manage access through natural language](https://tuebora.com/solutions/conversational-access)
- Resources
[Use Cases Real-world identity governance scenarios](https://tuebora.com/resources/use-cases) [Whitepapers In-depth technical insights and innovative approaches](https://tuebora.com/resources/whitepapers) [Blog Insights and thought leadership in AI-driven IGA](https://blog.tuebora.com/) [Documentation Comprehensive platform documentation and PDFs](https://tuebora.com/resources/docs)
- Customers
[Our Customers Leading enterprises that choose Tuebora for identity governance](https://tuebora.com/customers/our-customers) [Customer Portal Knowledge base, documentation, and support requests](https://support.tuebora.com/hc/en-us)
- Company
Company
[About Our mission, values, and what we believe about identity](https://tuebora.com/company/about) [Leadership Meet our founders, leadership team, and advisors](https://tuebora.com/company/leadership) [Careers Join the team building modern identity systems](https://tuebora.com/company/careers) [Life at Tuebora Culture and what it's like to work here](https://tuebora.com/company/life) [Contact Talk to sales, support, or our team](https://tuebora.com/company/contact)
Partners
[Our Partners Resellers, service providers, and global SIs partnering with Tuebora](https://tuebora.com/partners/our-partners) [Partner Program Earn commissions delivering Agent-Driven IGA to your clients](https://tuebora.com/partners/partner-program)
- [Editions](https://tuebora.com/pricing)
[Get a Demo](https://offers.tuebora.com/tuebora-iga-schedule-demo) [Request a POC](https://offers.tuebora.com/schedule-poc)
Tuebora Blog
# Insights & Blog
Welcome to the Tuebora blog. As pioneers in leveraging AI Agents for smarter, faster, and more adaptive identity management, we aim to empower businesses to secure their digital ecosystems with precision and efficiency. Here we strive to inform and inspire our readers with insights into the latest innovations, emerging trends, and transformative ideas in the IGA space. You'll discover how Tuebora not only anticipates industry shifts but also pioneers new concepts that challenge traditional approaches to identity governance. Let us guide you through the evolving landscape of IGA, where our expertise helps bridge the gap between complex challenges and practical, forward-thinking solutions.
[Get a Demo](https://offers.tuebora.com/tuebora-iga-schedule-demo)
[](https://blog.tuebora.com/the-scourge-of-orphaned-accounts)
## 26
### May
2021
### [The Scourge of Orphaned Accounts](https://blog.tuebora.com/the-scourge-of-orphaned-accounts)
[Ronan Mahony](https://blog.tuebora.com/author/ronan-mahony)
[0 Comments](https://blog.tuebora.com/the-scourge-of-orphaned-accounts#comments-listing)
[Blog](https://blog.tuebora.com/tag/blog), [Company](https://blog.tuebora.com/tag/company), [Identity Governance](https://blog.tuebora.com/tag/identity-governance), [Identity and Access Management](https://blog.tuebora.com/tag/identity-and-access-management), [Tuebora](https://blog.tuebora.com/tag/tuebora)
- [Tweet](https://twitter.com/share)
There are only two times that all the people in your organization have the right level of access to the data, applications, and systems in your company—before they join the company and just after an audit. In between audits, inefficient identity and access management can increase the likelihood of having orphaned accounts. This article informs you about orphaned accounts and their dangers.
## What Are Orphaned Accounts?
Orphaned accounts are user accounts that remain open with access permissions even though they aren’t needed anymore and they no longer have a valid business owner. In an ideal world, a clear provisioning and de-provisioning process for user access ensures that no orphaned accounts exist within your network. Several normal business activities can increase the chances of having orphaned accounts on your network, including:
- **One-off access approvals:** employees working on a project sometimes need once-off access to a system, database, or business application.
- **Granting user access for additional applications**: as employees advance in their roles, they often need access to additional business applications.
- **Providing access to meet contractor needs**: whether a contractor needs system access for a week or six months, this is a normal part of hiring contractors.
These factors alone aren’t sufficient to lead to orphaned accounts. It’s the combination of these normal business activities with a lack of proper identity lifecycle management that causes trouble.
## The Security Risk of Orphaned Accounts
Orphaned accounts provide a potential attack vector for malicious intruders to access your information assets, systems, and applications. According to an article on[SLPowers.com](https://www.slpowers.com/Inactive-Accounts-A-Hackers-Easy-Way-In),
"*Hackers often look for the easiest way in and one such entryway is through user and service accounts that are no longer in use. Disabling these accounts is a basic security step that is too often overlooked. In fact, a recent Varonis analysis found that 26% of all accounts belonged to “stale enabled users.” These accounts hadn’t accessed data or logged on to the network for more than 90 days. For one organization, approximately 90% of all user accounts were stale. That’s a lot of unlocked doors.*
*It doesn't take much effort for a hacker to find inactive accounts to target. A quick search on LinkedIn or Twitter can lead to Information about which employees have recently left an organization. What if one of those employees was a senior level staff member with access to a wide range of sensitive information? Valuable assets like intellectual property, personally identifiable information (PII), and financial records could be illegally accessed in minutes.*"
Companies in every industry are exposed to risks from orphaned accounts. In a startling example from 2019, cybersecurity software company [Avast](https://blog.avast.com/ccleaner-fights-off-cyberespionage-attempt-abiss) reported that its internal network, “was successfully accessed with compromised credentials through a temporary VPN profile that had erroneously been kept enabled and did not require 2FA”.
Efficient de-provisioning, automated or machine-assisted identification of unused accounts, and an agile IAM process are all key for reducing the information security risks or orphaned accounts.
## The Rubber-Stamping Problem
One particularly problematic IAM practice is rubber-stamping, which is when organizations bulk approve access requests to their systems, applications, and data. Rushing access approvals without adequately reviewing requests results in the perfect storm of orphaned accounts with too much access to your IT assets. All it takes for a data breach is a disgruntled former employee or a malicious attacker to access sensitive data through an orphaned account.
It’s also worth noting that properly controlling user access is an important part of several regulations, including GDPR and HIPAA. Non-compliance with industry regulations poses significant monetary and reputational risks. Bulk approval of access requests without an appropriate review is the opposite of proper user access control.
## Dynamic IT Infrastructure
Compounding the risks of orphaned accounts is the changing and increasingly complex IT infrastructure at many modern organizations. The global Covid-19 pandemic’s unexpected shift to remote work resulted in access requests inundating many organizations to facilitate the new working norm for employees with remote access to systems.
Additionally, many companies had to downsize and let go of some employees. which further complicated IAM lifecycle management. A natural result of such dynamic shifts in access privileges and IT infrastructure is an increase in orphaned accounts, particularly in cases where the IAM strategy wasn’t transparent enough anyway.
Another dynamic aspect of the IT infrastructure at many organizations is their use of the cloud. In public cloud services like Google Cloud or AWS, it’s easier to provision resources than de-provision them. Often, an organization can end up with a “zombie” cloud infrastructure in which cloud resources remain running even though they’re no longer used.
The problem with a zombie cloud resource, such as an unused cloud storage bucket, is that access to the data within it is not properly accounted for. In such a situation, it’s very easy for one or more orphaned accounts to exist. Whatever way you look at it, your IAM solution needs to be cloud-ready.
How Tuebora Can Help You
Tuebora gives you visibility into orphaned accounts and the access granted to those accounts whether the account is for a cloud app, an on-premise system, or a file-share. Our service monitors the access users have against what they should have and helps you take corrective action accordingly. What someone should have is based on a review of account usage, peer work group, and their role in the context of business processes.
Want to see how it works? Just press the blue button.
[](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/9046281/c6bcf0ea-4a0d-4508-9d4d-35d1663ba11d)
If you enjoyed this post, please consider [leaving a comment](https://blog.tuebora.com/the-scourge-of-orphaned-accounts#comments-listing) or [subscribing to the RSS feed](https://www.tuebora.com/blog/feed/) to have future articles delivered to your feed reader.
## Leave a Reply
### Feeds
### Popular Posts
### Archives
- [August 2025 (1)](https://blog.tuebora.com/archive/2025/08)
- [May 2025 (1)](https://blog.tuebora.com/archive/2025/05)
- [October 2024 (1)](https://blog.tuebora.com/archive/2024/10)
- [August 2024 (2)](https://blog.tuebora.com/archive/2024/08)
- [May 2024 (1)](https://blog.tuebora.com/archive/2024/05)
- [March 2024 (1)](https://blog.tuebora.com/archive/2024/03)
- [January 2024 (1)](https://blog.tuebora.com/archive/2024/01)
[](https://tuebora.com/)
Identity Intelligence. Executed.
Policy-driven, explainable identity governance with agent-based execution across your apps, cloud, and infrastructure.
[Get a Demo](https://offers.tuebora.com/tuebora-iga-schedule-demo) [Request a POC](https://offers.tuebora.com/schedule-poc)
#### Platform
- [IVIP](https://tuebora.com/platform/ivip)
- [Tuebora Studio](https://tuebora.com/platform/studio)
- [AI Agent Framework](https://tuebora.com/platform/ai-agent-framework)
- [Experience & Interaction Layer](https://tuebora.com/platform/experience-layer)
#### Solutions
- [Access Governance](https://tuebora.com/solutions/access-governance)
- [Identity Lifecycle Management](https://tuebora.com/solutions/lifecycle-management)
- [Compliance & Audit](https://tuebora.com/solutions/compliance-audit)
- [Non-Human & AI Identity Governance](https://tuebora.com/solutions/non-human-identity-governance)
- [AI Agent Governance](https://tuebora.com/solutions/ai-agent-governance)
- [Conversational Access](https://tuebora.com/solutions/conversational-access)
#### Resources
- [Use Cases](https://tuebora.com/resources/use-cases)
- [Whitepapers](https://tuebora.com/resources/whitepapers)
- [Blog](https://blog.tuebora.com/)
- [Documentation](https://tuebora.com/resources/docs)
#### Customers
- [Our Customers](https://tuebora.com/customers/our-customers)
- [Customer Portal](https://support.tuebora.com/hc/en-us)
#### Company
- [About](https://tuebora.com/company/about)
- [Leadership](https://tuebora.com/company/leadership)
- [Careers](https://tuebora.com/company/careers)
- [Life at Tuebora](https://tuebora.com/company/life)
- [Contact](https://tuebora.com/company/contact)
- [Our Partners](https://tuebora.com/partners/our-partners)
- [Partner Program](https://tuebora.com/partners/partner-program)
#### Editions
- [Editions](https://tuebora.com/pricing)
© 2026 Tuebora. All rights reserved.
[Docs](https://tuebora.com/resources/docs) [Privacy](https://tuebora.com/privacy)