As another poster detailed, this is not a company that exposed your info: these credentials are all from stealer logs, which are logs of credentials stolen by keyloggers installed on machines. If your credentials were in this report, it means that you’ve entered that username and password on a machine with malware on it. Could be your personal machine, or it could be some other computer you’ve used.

Going to the Labor board, at least here in Oregon, is pretty painless and may be doable while still working there. My only experience with them was after an employer just locked us all out of the building and closed one day, so continuing to work wasn’t an option for me. They treated me well and got me money quickly, then took the guy to court to get it back themselves.

Also, I don’t “keep talking” about much here; the comment you replied to was the first one I made :).

If you get fired for that, you should take them to your state’s Labor board and/or to court.