PhishThreat (PT) data cannot be modified during or after a campaign goes live. Since PT currently uses an independent user database (not tied to cloud AV - which is tied to Active Directory (AD)) user details can be incorrectly and permanently captured.

Scenario1: A staff member is listed in a specific department in AD. The user list is exported from AD and imported to PT prior to the launch of a campaign. The campaign begins and the user is promoted/ transferred to a different department or the original department was wrong, the change is made in AD, and the export/ import is performed again. the user's department is not updated in the campaign. If the user creates a reportable event in PT (clicked an email, clicked a link, entered credentials, failed a training etc.) the report data, and subsequently the department performance reputation permanently suffer as a result.

Other Scenarios: Consider the effects of a change of
Name (Married)
Email address - Will the user get training reminders?
Manager - will the proper manager receive notice about their staff?

Being able to modify this data during active and past campaigns would allow for the proper (read: accurate) reporting of metrics from the PT system, and proper operation of the product given events that commonly occur at any time.