Consider if your support cases were instead with Zendesk and not with Salesforce. This could explain why they did not contact you.

They did indeed contact me by email to let me know my data was in scope of the breach.