Email accounts inside 5 US companies unlawfully breached through password resets.