Mossack Fonseca Breach Theory

They were serving sensitive customer data from their portal website which includes a client login to access that data.

Here is an interesting theory on how the breach happened.