If you got a notification, that’s something that’s required by law, and that means the company is complying with the law. They’re letting you know that the information was exposed. Now, does that mean that something’s happened with it? You can have your information exposed, but it doesn’t mean that anyone’s doing anything with it. But by law, they’re still required to notify you, and they’re required to put all that information that you regularly see, including when they learned about it, what type of information it is, and if they know more about what happened in the incident.
They also have to tell you that at that point as well. But just because you get the letter doesn’t mean that anybody’s actually doing anything inappropriate with it. However, it certainly is enough to raise a level of concern, and you should definitely seek consultation with a lawyer to see whether or not anything inappropriate has happened with it.
