The security vendor counters that none of the information came directly from its systems but rather was acquired over a period of time by targeting individuals.
Source: htdarkreading.com