Encountered something weird today with a terminated employee's old email. My company forwards emails to the terminated employee's supervisor and yesterday they received an email from NetSuite saying terminated employee answered security questions and has gained access to their account. I checked said employee's record this morning and I removed their login access back in May, so that shouldn't have been possible. Is there anything else I should be doing right now to make sure everything is secure?

Do you have sandbox/dev/release preview? You can sometimes get past security questions - and then still get locked out if you are inactive.

We have sandbox, which I just checked. They technically still had access so I removed that but I checked the login audit trail and saw nothing with their name on the date the email said.

Seems like it might be worth a call to NS to make 100% sure nothing happened - how did you remove their access? Removing the access checkbox or marking employee inactive?

I removed the access checkbox back in May and made sure all roles were gone. We marked the employee inactive today.

Only thing I can think of that might also be concerning is if they had access to another NS instance - maybe via customer center.

They were hired as a contractor so I could see it being possible they have access to another instance. I think I'll give NS support a call just to be safe. Thank you, Kevin! As always, you are a huge help!

Did they use their email address? or a company provided email access (by your company)

It was a company email address, so of course they wouldn't have access to another instance with this email.