If a user’s wallet.dat is found this way:

: Even if encrypted, the file is vulnerable to offline brute-force attacks. Attackers use high-powered hardware to guess the passphrase. Privacy Leaks