One user said the exposed data tied his home address and card number to every crypto wallet linked to his account, raising the risk of targeted scams.