The PHP leak was described as posing a risk that criminal groups could try to steal customer files from companies and use them to extort those companies.