This is a rather common scenario.

I often have to contact companies to remind them to disable my access to their internal systems. I often discover I still have access many years later.