Such attacks often occur when employees work remotely and use a mixture of personal and business devices to access cloud services.
Source: techrepublic.com