Brian Krebs posted about an interesting real world example of this the other day:

https://krebsonsecurity.com/2015/08/inside-the-100m-business...