Any of our personal financial info could have been stolen/hacked weeks, months or even years ago, unbeknownst to us, and currently listed for sale worldwide on the many "Dark Web" websites that specialize in such, along with thousands upon thousands of others, but just hasn't been bought and exploited yet by end user thieves.
