Dormant Account
An account that's still active and technically valid, but hasn't been used in a long time — leaver-shaped risk hiding in plain sight.
Unlike an orphan account, a dormant account still has a legitimate identity behind it — the risk isn’t that nobody owns it, it’s that nobody’s watching it, which makes it an attractive, low-noise target.