You can be targeted just for ending up in a database leak.