There are plenty examples where criminals acquire the data from companies, e.g. social media. There was a time where you could upload a very old adobe hack (~1

There are plenty examples where criminals acquire the data from companies, e.g. social media. There was a time where you could upload a very old adobe hack (~100M email addresses), find out the person's name, DOB, who they know etc to various social media platforms. It's improved somewhat but there's still so many vectors.