It is the case. Actually its *taught* in cyber security to cut off employees asap from network once the got fired. No matter how much is monitored, theres a large risk of damage. It takes just one employee out of 12k with crucial access and malicious intent to do huge damage.