I figure that info is out there in the wild in the hands of criminals after countless data breaches.

And I'm less worried about those criminals having my data than Oracle. I think they only see the world in two colors: 1) Current customers 2) people to sue. And lots of #1 are in the second category as well.