Yes, ours was used fraudulently the week before the breach was announced.