There is a huge aftermarket for iOS Entreprise certificates. They either get stolen or attacker get their hands on the users credentials.