How about “leaked”? I chose “breached” because title of mail was “You're one of 15,111,945 people pwned in the Trello data breach”