...yet
"does not believe the lifted records have been used for fraud"
It has not been used for fraud yet. Once the data is out there, the chance of it not being used for fraud eventually is essentially zero. Saying you haven't noticed it happening yet is an utterly worthless statement that only suggests you're hoping everyone has forgotten about this specific leak by the time the fraud actually happens so you don't need to worry about being held responsible for it.