https://www.bleepingcomputer.com/news/security/contractor-exposes-credentials-for-universal-music-groups-it-infrastructure/

Keys to the Universal Music Group's IT kingdom were made available online this month due to a forgetful IT contractor, Bleeping Computer has learned.

This leak of highly sensitive information took place because a third-party contractor that was managing a part of Universal's IT systems had deployed an instance of an Apache Airflow server without securing it with a password.