. . . "The IDs and passwords probably came from a one or more compromised lists from other companies, sites or other sources." .