Different, but related. A forensics company does not have the ability to claim ignorance of security issues - /especially/ if their role is digging up dirt on others. They should be fully aware of privacy and security issues.

Now if they were a company that baked and distributed cheesecakes, I'd give them a pass on criticism for having security issues.

But that's not the service they're providing, thus incompetence in that arena does not endanger multitudes of American lives and anon ruining their company is unjustified.