That can happen, the majority happens because of their own carelessness. Teledor in putting down wallet storage data, cannot keep wallet privacy data from people around. Careless in using the internet so that it provides a gap for hackers to be able to browse wallet data. Everything that smells online is quite risky, so be as careful as possible in accessing the site.
as you are talking about, most cases of MEW wallet burglaries occur because they are stuck in a phishing site. that is because many people just open a site that is dangerous, and randomly search for it