I agree, it is not the first time, it is not going to be the last!
This is the most dangerous thing about sending our data to these exchanges because when a breach like that happens only god knows where these data is going to finish and who is going to use it to scam us even further. I am glad I do not use that service.