In the Klue compromise, data that one attacker group had already stolen was subsequently stolen by a second group from the first group’s infrastructure – a scenario that calls into question control over stolen data.