[jaclaz]

I may be missing something, but the net effect of this kind of breach is seemingly not that (like the case of a data breach of a "single" company user database) of having "reserved" data (that only the company had and that was given to it with an expectation in good faith by the user to keep it safe) in the hands of someone else, it is more like having data that was already available to anyone for a fee in the hands of someone that didn't pay that fee.