Hard-to-reach targets probably become a lot easier to reach when you have years' worth of stolen credentials and private data.