Over 130 companies have been compromised by a series of attacks that built upon the data first obtained from telcos.