We live in an age where data flows like water, becoming the new life source of our everyday ventures. It is no secret that our personal information is as valuable if not more than actual currency. We get more breaches like that than we would like to admit. This is where Penetration Testing comes along to identify potential risks in organizations. This means that an attacker could do this as well as using all of the tips and tricks that would, and then they would report to the businesses where they are working for all of their weak areas.
Source: https://thehackernews.com/2018/11/penetration-testing-compliance-audit.html