Nobody knows exactly what was accessed. What you have listed is what the register contains, not what was accessed. People with "Protected addresses" have specifically not been compromised.

That is not what I have heard.

AFAIK those with protected addresses has not had their address compromised. But ID and name still is.

And with the rest exposed it is now trivial to see what adresses are "interesting".