[bots]

Her privacy was invaded, that'ts the point. |If she were in Europe, some company would be facing a large gdpr fine.

People should quite rightly expect companies that provide services to maintain their privacy, and it is the fault of the company, not the person.

We all have information that is on line that we expect to be kept private, because we signed up to terms that assured us they would be. If a company breaks those terms, they should be held responsible, not the person whose details were stolen