One person from Wikimedia has already accidentally used my real name in a public mailing list (although iirc he spelt it wrong). And a private wiki with that name on my user page was found to be accidentally open to all to view. And that's with me being "paranoid".
I hope the people responsible have been slapped repeatedly with a wet fish - they really do need to be more careful with private information. Revealing private information is one of the worst things a member of Wikimedia staff could do.