In all those breaches, somehow the human factor pops up.
I am no security expert by no means, although I took a security course at CS, humans are always the loose end.
Yes, there are exploits and vulnerabilities, but social engineering is sometimes, if not always the low hanging fruit.
As a experiment, I asked a security personnel to a date/coffee, she came wearing her tag with all credentials. Took a photo discretely, breached in in her vault later on.
She went mad, called me names and all that I was using her and all that.
No, I was just levering human traits and ego.
And no, I will not ask for a date as a married man and have a fling. That was the part of the plot, and she took the bait, sink and more.
Guess she will hate me forever. I only care if my spouse is happy and my paycheck lands in my account.