My story is more of a facepalm since there was no known hack that came of it. My former employer had a helpdesk website that was written in Perl 4 in the '90s

My story is more of a facepalm since there was no known hack that came of it. My former employer had a helpdesk website that was written in Perl 4 in the '90s by some interns. The users' passwords were stored in plaintext in /var/www under a subdirectory. Anyone who guessed the URL could have stolen those passwords and accessed a trove of information and data of some of the biggest financial institutions. My coworker and I patched it up as much as we could (2018-20), upgraded it from RHEL 4 to 7/8, Perl 5, fixed the public password issue, and flagged it with management but it largely fell onto deaf ears at the time. I am still amazed at how blatantly incompetant and reckless some companies are.