Envoy, specifically, a startup that manages physical workplace access (ie. "Empower employees to reserve a desk in the workplace"), all with redundant storage of potentially sensitive employee information, like names, phone numbers, ID documents, legal agreements, physical access badge data and photos, etc.
Kind of surprised we haven't heard more about hacks among the proliferation of underbaked startups that backfill basic workplace and HR services.