Confirmed to have happened to employees of Belgacom and Stellar PCS, and the fact that the technique itself is documented with a codename suggests it happens to others who weren't leaked.