Indeed. My company forgot to warn the the credit card had been updated, emails were being sent to the work email of an employee that left... Took 4 months before they started turning off stuff, and even that was quite gradual, just enough to draw attention