If an internal network is connected to the Internet and the transition is not sufficiently protected (e.g. due to a lack of or incorrectly configured firewalls), attackers may access sensitive information of the corresponding organisation and copy or manipulate it.