You are victim blaming. Should they have been more cautions with handing over their data, yes. But the fact that they have to, is representative of the bad state of society. It is the fault of the company, people or systems that where trusted by the communities to properly protect it against evil actors. If they cannot protect that data, they shouldn’t have gathered it in the first place. And for that they should get punished properly and should recompense all victims. They should no longer be in business.

Civilization is built on trust, and if that trust erodes, civilization does too.