Saudi Aramco cyber-attack (2012) INVOLVES default usernames and passwords
Attackers briefly regained access because some perimeter security appliances retained default usernames and passwords.
Explicit Confidence 98% · Chris Kubecka EP 30 Details
“had left some of the stuff with default usernames and passwords on the network and security appliances”