The data got leaked by a private company.