The models in these breaches have already been caught using proxies to get to servers outside of the approved list.

They've also hacked third party machines and used them to launch attacks on further services.