Yes Darragh, we've had instances whre user machines have become infected due to malware, even during the weekend, and as a result the organization's address range was blacklisted when they returned to work on a Monday morning.