> One of more of those entities, who are all supposed to protecting her privacy failed to do so to extract a few more bucks.

I would suggest that that is not "failing to protect" private data, but "actively exploiting".