Not sure if it's from this data breach, but I just had a credit card I don't use, hijacked.
A no-good scum-bum (to use nicer language) in Groton, CT somehow got onto my account, changed the email to his, upped the credit limit, added himself as an authorized user, and sent himself two cards. One for him and one for who I assume is his wife or sister.
I only found out about it because the app was telling me the credit limit increase I requested was approved, and the cards I ordered were sent out.
If they got my SF-86/EPSQ, they pretty much have any and all information they need to reset any password if they call and answer most likely "reset password and I can't get into my email" questions.
Govt' skill strikes again.. And it's not the idiots in charge dealing with it.