You can check some logins with ihavebeenpwned.com to see if the list has already been exfiltrated.