She walked to the printer, typed into the password field—left the username empty—and pressed OK.

The admin menu opened like a vault door swinging wide.

Here’s a short, interesting story built around that search phrase.

But something was wrong. The “Job Accounting” tab showed a user she didn’t recognize: CRAIG_ADMIN . Last login: yesterday at 3:47 AM. And there, in the scan history—a PDF titled Invoice_Underpayment_Scheme.pdf —had been emailed to an external Gmail address every night for the past two years.

Last Thursday, the shop’s workhorse—a Kyocera Taskalfa 352ci—started acting up. “Access denied,” the screen read when they tried to adjust the admin settings. The billing counter was locked. The scan-to-email feature was frozen.

The printer wasn’t misconfigured. It had been a ghost in the machine. Craig had left the “default password” as a trapdoor, counting on the fact that no one would guess —not a common default, but his default from the factory datecode.