Security Breach

On 20 Dec 2019, Ring.com sent out an email regarding the compromise of user account information. Specifically: "Malicious actors obtained some Ring users’ account credentials (e.g., username and password) from a separate, external, non-Ring service and reused them to log into some Ring accounts."Perhaps I need to re-read the Terms of Service or Privacy Statement - but, HOW did these 'malicious actors' obtain the Ring user account information in the first place?Do you sell that sensitive information to separate, external, non-Ring service providers?Please advise.