That means they have to be hacking into SE servers/ databanks which they most likely are not