Someone wrote a few unit tests for automated testing of new code: "drop database; create database; create table ..." so on.
Then he mistakenly put down IP/user/pass of the production database in that test code. And ran it.
Result was as expected...
https://www.digitalocean.com/company/blog/update-on-the-april-5th-2017-outage/