Also lack of isolation of critical systems, the biggest fault honestly. Basically isolate all PII and other systems from each other.