In this particular case, the company would have known at the beginning of the suspension, whether they planned to fire the guy or not.I don't find that clearly in either TFA or even the articles linked. How do you know that? I didn't see something clearly stating why he was suspended or wheter they were sure.As far as the rest, et me just rearrange a little what you said.The fact that they didn't disable his credentials, implies that they thought he was coming back. however suspension doesn't assume either that the employee is, or is not, coming back.Even if you are pretty sure he's coming back after suspension, you can't actually ever be fully sure. The employee might just get resentful at what they think is unfair treatment and leave anyway. I might deliberately leave something open to see what they do, but I would , A judge has sentenced a disgruntled IT worker to more than seven months in prison after he wreaked havoc on his employer's network following his suspension, according to West Yorkshire Police., Employer-hostile acts included altering login credentials and disrupting the company’s multifactor authentication (MFA) systems. Taj was sentenced to seven months and 14 days after admitting the.