When breaches are due to a client PC compromised via malware, its very difficult to determine what data may have been compromised. In the blog post below, I elaborate on how it is like identifying who came in contact with Typhoid Mary and what did they have in their pockets when they did so.

http://www.securitynowblog.com/endpoint_security/pc-malware-costly-security-breach-disclosures