Is there any signs that this data is actually out in the wild?
Check the dark web.
From the article, it was found, reporter and fixed within 24 hours
Being fixed within 24 hours of being reported does not mean it was only available for 24 hours. It could have been 24 days or 24 months.
they claim there's no sign of other unauthorized access.
Anyone smart enough to access this would also be smart enough to cover their tracks. When I was black hat in the 80's, this was Infiltration 101.