In what way is this data private? Wasn’t that point crossed on collection from private individuals?

This seems like a technical consideration more than an avenue for judgement.

Yeah, it was private data that was stolen and then released publicly by someone who stole the stolen data. Would it be ok with you if I installed malware on your phone, stole your private messages, and then those messages were stolen from me and released for the world to see? That's what happened.

From an individual perspective it doesn’t fundamentally matter who has my data. It’s either within my control or it isn’t.

This is just a status update. Horse still out of barn.

I struggle to differentiate it from investigative journalism.

> You've given data to Company X, they aren't looking after it correctly.

Is it private data of criminals and thieves? If that’s the case it’s hard to feel sympathy.

It's private data about the victims of criminals and thieves.

Nope. It's data from their victims