One misstep from developers at Starbucks left exposed an API key that could be used by an attacker to access internal systems and manipulate the list of authorized users. […]
Click here for original story, Starbucks Devs Leave API Key in GitHub Public Repo
Source: Bleeping Computer