This is one that is hard to quote and really write about, but I saw it while preparing for the news notes and wanted to read it. ZDnet is full of adds, but not harmful, but makes this hard to read. The content however is of importance, and should be viewed as this can happen to any sector or business.
Source: This phishing scam left thousands of stolen passwords exposed through Google search | ZDNet