Earlier today, I fielded a tech support call from a relative. They'd been forced to sign up to one of my least favourite things, a "customer portal" which is clearly a better and more secure way of fetching documents than having them e-mailed.
"I signed up but now it won't accept my e-mail address and password!"
Watching them via TeamViewer, it became apparent that the relative was doing that classic "civilian" thing of Googling for "CompanyName login" rather than remembering or using a bookmark for the portal's login page.
And what was the top hit on Google for this particular company's name with "login" after it?
The Wordpress login page for the back end of their website. Branded similarly, it looked close enough to the actual portal login page to confuse.