In response to your first paragraph: "...yes?" You're literally describing the ramifications of a data breach. Whether the data is easy to get is entirely irrelevant: once it IS available, you'll have to operate under the assumption that any damage that can be done, will be done.

As for the second paragraph, it is trivial to grab a copy of all this data. The only ones that are hard to get are the ones you (or even anyone) haven't been told about yet.