* An employee account was compromised - usually because they re-use their password and that password was exposed in an unrelated breach. And then failure to require 2 factor authentication for 'internal' accounts - (github organisations, aws, internal administration tools, etc.) - Timehop, Gentoo

* Failure to patch known vulnerabilities - Experian

* Running untrusted code client side (Webchat) - Ticketmaster (although unclear what the vulnerability was that allowed the compromised scripts to be uploaded to Inbenta)

* Unsecured database backups - Typeform (although it's unclear yet what the original compromise entailed)

* Data left 'accidentally' exposed publicly (no credentials required to access it) - Exactis