Randomly came across this blog post written in light of the Quittr porn quitting app leak.
Turns out at least two whitehats found the vulnerability and reported it directly to the company who acknowledged the reports.
This is a blog post about getting owned because you were complacent and thought you weren't important enough to target.
And if you look at any older protocols (which are usually simple enough to convert from binary to plain text by hand) you'll suddenly find power plants and traffic control systems