In reply to Amir Helzer.
And we, the people and businesses who give WPML full access to our WP installs and databases for support reasons, needs to seriously think twice about that too.

You could argue that we, your customers (a little while longer), should always give access to a staging or development site instead of production. However, it’s not very likely that all sensitive data is removed from all test sites. Hence, your employees gain copies of or access to an insane amount of customer and order data, plus part of API credentials, etc. Every single day. Scary!

How many copies of e-commerce sites does this disgruntled ex-employee have? And other employees? You have no way of knowing, do you? What kind of security measures do you have in place to prevent this?