private data stolen