The assumption that these hacks were done over the Internet is kinda presumptuous. Hackers social engineer, too, you know.. especially the competent ones.