The credit agencies have also leaked all their info many times. You don't even need a credit report if you're already dealing with leaked PII.