A small marketing agency had an open index of /clients/2021/ folder. Inside was passwords.txt listing logins for their clients' social media accounts, Google Ads, and AWS servers. A script kiddie found the file, defaced several high-profile brand pages, and racked up $40,000 in ad spend before anyone noticed.
: Files where website owners or users have mistakenly saved usernames and passwords in a simple text format. index of password txt 2021
If you are researching this to see if your own data is exposed, there are safer, more legitimate ways to check: A small marketing agency had an open index