Aren't a large number of massive data leaks caused by some Marketing person setting up an AWS instance, and dumping the corporate DB into it?