Yup. Also, data-mining by non-tech staff. So many of these breaches, are because some marketing person took a dump of the data, and stored it on an open AWS instance, while they mined it.