An attacker with such access can cause significant damage. The implications are costly, including potential data breaches, system shutdowns, and malware propagation. Beyond that, there are significant privacy concerns, including access to personal data, intercepting of communications, compromise of user profiles, identity theft, and more. Of course, any of these could mean a loss of reputation for companies, and the risk of severe legal action.