Nearly 19,000 infosec experts travel from all over the world to attend the annual Black Hat Conference. Both hackers and security professionals strongly agree that service accounts are an attractive target because hackers can easily elevate privileges and gain access to sensitive information. Service accounts fly under the radar of IT governance and can have access to critical applications and data. They are extremely time-consuming to discover and control, and are also prone to human error when managed manually. One-third of security professionals say service account accounts are changed only after an incident or never rotated.
Source: https://threatpost.com/service-account-secrets/148996/

