Comment by iuri1

Either database dumps are in commit history (very common) or credentials like a password for a database is (even more common).

A third reason would be finding a security flaw in the source code and exploiting it.