Comment by gorokan

You are right; choice of SHA256 is about handling personal data safely.

Unfortunately, the leaked data is available to anyone. There is no point of putting an extra effort of recovering the data from its hashed form.