Precisely this. They prey on outsource-happy big orgs that have 1 million different SaaS all tied together by scotch tape (because their IT dept. is also outsourced)