A "friend" of mine got 200,000 NASA employees data including SSNs, pay accounts, etc. from an entirely unguarded Telnet door in 2002.
You'd be surprised how many doors there are the larger a building gets that never bothers to upgrade security until an incident happens.
Pretty sure it was very much a "We forgot we even had that door still" situation.