Developers may forget that everything on chain is public, and store private data in the open. Checkout Ethernaut level for this More resources Accessing Private Data - Solidity by example https://kubertu.com/blog/solidity-storage-in-depth/