[jsnell]

This is not data leaked by businesses. The businesses were also not breached.

The data was stolen from the users' computers, by malware installed by the users themselves.