Some could have been stolen from a compromised server.