Another major difference is that Svenson intentionally omitted faces, so determining identity is very difficult. Leaking emails to Gawker for users' AT&T accounts is partially identifying its users, so it could even be considered a hostile action (against either AT&T, its customers, or both).

If that is hostile, then what is ISPs selling browsing data [1]? Google gathering location data even on those who opt out? Facebook gathering contacts lists and text messages [2]?

And no, not selling that data doesn't make the act non-hostile. If company X possessing that data is hostile, why is Facebook/Google/AT&T/Microsoft having it any better? Because of their saint-like reputation?

[1] https://www.howtogeek.com/724472/do-isps-track-and-sell-your...

[2] https://www.cbsnews.com/news/facebook-gathers-texts-phone-da...