diff --git a/src/Tgstation.Server.Host/Security/IdentityCache.cs b/src/Tgstation.Server.Host/Security/IdentityCache.cs
index 8f4d6a2517..cb50e7ccb5 100644
--- a/src/Tgstation.Server.Host/Security/IdentityCache.cs
+++ b/src/Tgstation.Server.Host/Security/IdentityCache.cs
@@ -71,7 +71,7 @@ namespace Tgstation.Server.Host.Security
 				throw new ArgumentNullException(nameof(user));
 			lock (cachedIdentities)
 				if (cachedIdentities.TryGetValue(user.Id, out var identity))
-					return identity.SystemIdentity;
+					return identity.SystemIdentity.Clone();
 			throw new InvalidOperationException("Cached system identity has expired!");
 		}
 	}