Generally these breaches happen on the service side rather than the user side. These likely include users even with secure and insecure alike.