Just realized that with the information leaked (passport number , birthday, name and asiamiles/MPC number), it would be enough to do the phone verification with

Just realized that with the information leaked (passport number , birthday, name and asiamiles/MPC number), it would be enough to do the phone verification with them and redeem miles from the account. So, not having leaked passwords is really not that much of an achievement.