You should now assume your sources are compromised if you did not expect this