The fact that they might have leaked personal information via their testing platform suggest questionable security practice. As a rule of thumb, you don't use production-environment/real info during testing. It should always be scrambled or dummy data, especially if it involves personal info.