The impact is often not seen immediately as databases of leaked accounts can be used for further hacks (impersonation, social engineering, blackmailing etc.) I'

The impact is often not seen immediately as databases of leaked accounts can be used for further hacks (impersonation, social engineering, blackmailing etc.) I'd attribute that to the lack of studies and difficulty to trace hacks back to leaks.