As with any juicy enough collection of data, the relevant question is not "what if an adversary gains access" but "when".