It happens when an attacker obtains sensitive data through offline means, like eavesdropping (“accidental listening” to online traffic), system penetration, or stealing security files with privileged information.