[tptacek]

Yes. Under normal circumstances, the attackers would have silently harvested all the victim's accounts and sold them in Estonia.