Yuuup! I've been looking through the Epik dump [1] and there's all sorts of PII where it shouldn't be. Logs for sure. Also object dumps as text fields. [2] And the most impressive mistake is logging every failed login attempt with the login and password. There are a ton of entries where people put the password in the username field and vice versa, so it's basically a big database of passwords of frequent users.

There are also a ton of tables where they made a backup copy of the table and just left it in the database for years. Ditto switching to new coce but not cleaning up the old data. So even data that would normally be removed due to, say, expiring domains ends up being preserved.

I recommend digging through it to anybody who is sad about the systems you run at work. It's such a fractal set of fuckups that I promise you'll feel better about your legacy systems.

[1] https://ddosecrets.com/wiki/Epik

[2] in PHP serialization format: https://en.wikipedia.org/wiki/PHP_serialization_format