And get their data "leaked" in a "data breach," then sold on the dark web to identity thieves and scammers.