The data appears to be from malware victims, not from compromised services.