What happens when I was using a 3rd party app and they had a breach?

They have to tell you it happened and fix the breach. Of course, you were supposed to be responsible enough to be aware of potential problems as well, so it's hard to say if you're going to be able to ask for more than that if you were made aware when they informed you instead of being aware of it on your own.