A good chunk of the entire user base of a particular email service is being targeted for sensitive credentials.