At least a hybrid job Seems most likely.
You only need one stupid, or one smart person who has the network permissions.
One of my test accounts had full access to the source code, one day 12 years later some security review people freaked out.
I have no idea wtf was breached but I can only assume the whole internet was compromised
"Ah Ah Ah....You didn't say the magic word."