But I'm guessing that doesn't work with someone who's been collecting other logins:

> Muneeb had been assembling usernames and passwords—5,400 of them taken from his own company’s network data.