The source of this release has confirmed that the data was not acquired by a hack but because it was stored on a misconfigured server and basically open for grabs.

Even more alarming, the data was retrieved from an Israeli server in Tel Aviv – neither the source nor we have any idea what the data was doing there in the first place.

Updated March 5: Tracy Kitten of BankInfoSecurity.com reports that it was allegedly ClearForest, a Thomson Reuters company, that had the leak from their server in Tel Aviv.