If you employ people who keep track of your money, it's never a good idea to make them unhappy. Huaxia Bank in Beijing should have remembered this before they aggravated Qin Qisheng, who discovered a loophole in their ATM programs that allowed him to become quite the wealthy man.
While working at the bank, Qisheng realized that ATM withdrawals made around midnight did not register on their system. Instead of reporting the issue, he added code to the bank's software which would stop any "suspicious activity" alerts and began taking advantage of the glitch.
Now that's what I call insider threat! Happy Chinese New Year all: #hacking #insiderthreats #cybersecuritynews https://t.co/p5SUdhc0Gm— Kawin (@Kawin)1549366447.0
Qisheng made a test account and ran test withdrawals of "5,000 yuan to 20,000 yuan."
His behavior was noticed after 14 months of taking out free money, by which point the employee had taken out "7 million yuan (£800,000)."
That's a lot of Yuan! https://t.co/eyh9Ca4GCQ— 𝗞𝗲𝗶𝘁𝗵 𝗜𝗽𝗽𝗼𝗹𝗶𝘁𝗼 (@𝗞𝗲𝗶𝘁𝗵 𝗜𝗽𝗽𝗼𝗹𝗶𝘁𝗼)1549539224.0
When he was found out, Qisheng claimed that he was only taking out the money to test the bank's system...despite the fact that some of it was then used to invest in the stock market.
Surprisingly, Huaxia Bank believed his explanation and asked to drop all charges after Qin returned the money.
@verge https://t.co/d8moWTtuPi— 24K (@24K)1549416488.0
Authorities, however, chose to press charges against Qisheng anyway, and brought the case to trial. He was sentenced to 10.5 years in prison as well as a fine of 11,000 yuan.
@verge Transfer them in my account someday maybe I’ll have a thing called life then— 90s kidd (@90s kidd)1549480067.0
Qin defended himself by saying:
"The customer generally would not report to the bank, [so] we were not informed about this situation. The problem was definitely there, the bank just couldn't find the reason."
@verge Nice. Let’s go buy some homes in Canada.— p ^ u L (@p ^ u L)1549416884.0
Huaxia Bank also came to Qin's defense during the trial:
"Qin Qisheng said that the matter was complicated and involved lots of work. He believed the bank would not pay attention even if he reported it... We think this reason for not reporting is legitimate."
@verge Hm. Wish I knew that loophole..— Matt Crawford (@Matt Crawford)1549418005.0
The sentencing judge didn't buy Qin and the bank's stories, however:
"On the one hand, [the bank] said that the accused's behaviour was in violation of the rules. On the other hand he said that he could conduct relevant tests. This is self-contradictory."
@verge And then was promptly arrested— SkeleCrafter (@SkeleCrafter)1549449770.0
This entire ordeal has led Huaxia to fix the loophole, so no one will ever be able to take out free withdrawals again. At least Qin lived it up while he could!