There is often a lag between exposure and impact in most security incidents. Credentials leak, data circulates, and only later does something visible...