I'm assuming people info is being hit via hacked accounts from other games with same name/pw. Also from exploited web elements, that's just my assumption based on the information I know about infections.