My biggest mistake: years ago I ended pushing personal credentials to GitHub at night and waking up to a several thousand dollar bill in the morning.
Changed credentials and cancelled all the running instances only to find that I’d missed some.
It was resolved by the afternoon.