I assume project handed from one person to another, one of them kept notes outside the code, maybe got fired. Or an intranet app originally and devs not expect

I assume project handed from one person to another, one of them kept notes outside the code, maybe got fired. Or an intranet app originally and devs not expecting it to be exposed to the internet? But i’d bet it wasn’t a mishap but an assumption gone wrong (or stale).