Barely remember... I think it was some staff/user directory listed within robots.txt, which also happened to not verify edit credentials on the backend so I was able to 'borrow' a login from a backup admin :)

Plenty of similar stories about other better known orgs/corps but this isn't the venue for those :)