If I steal capital ones company vehicle and get in a head-on collision, capital ones insurance still pays the damage. I'm still criminally liable for unlawful entry, but C1s insurance covers the damage done by their vehicle. The same precedent needs to apply here. If I broke into a chemical plant and released harmful toxins into the air, the company is still civilly liable. In this case, the data is the toxin.