That's the researcher's assumption as well: > The uniform formatting and lack of prior exposure suggest these weren’t collected passively. They were scraped or

That's the researcher's assumption as well: > The uniform formatting and lack of prior exposure suggest these weren’t collected passively. They were scraped or exfiltrated using active tools—most likely infostealer malware—and gathered into datasets optimized for sale or deployment.