A more positive implication is that downstream security has gotten good enough that large breaches like this can’t be systematically exploited for financial gai

A more positive implication is that downstream security has gotten good enough that large breaches like this can’t be systematically exploited for financial gain. Two factor auth seems to be more pervasive, and there’s a host of retrospective security tools in the industry. That said, I have no doubt there’s a vibrant underground market for all this data, and its likely being used in more surgical attacks already, and could, one day, be the basis of a broad attack (once an appropriate attack vector becomes available).