...Information used for KYC such as passports and driver's licenses may be exposed if the exchanges are not well secured.
By itself, the disclosure of information contained in a passport or driver's license is not particularly secret. The problem arises when the disclosed data is linked to your wallet and it becomes known to attackers. Although if the tax authorities know about your cryptocurrency income, then this will also cause you additional problems.