You don't need the breach, the DB is already public (in encrypted form). So yeah, all you need is either a currently unknown mathematic weakness in the encrypt

You don't need the breach, the DB is already public (in encrypted form). So yeah, all you need is either a currently unknown mathematic weakness in the encryption scheme, or bug in implementation, or as you suggest some future quantum or other technical advance that defeats the encryption.