Comment by Shorel

The CEO of the company I work for is extremely paranoic about data breaches.

We do a lot of prevention and recovery testing.

So yes, it can happen.