[dragonwriter]

> On the one hand, let's assume it's true: a Paytm employee acted negligently.

No, that's not “negligent”. Or even “reckless”; the violation of privacy is deliberate.