So basically – cybercrime and extortion is perfectly fine as long as it doesn't affect me. If it does, everyone must be held accountable.

I think that is basically the human condition. That said, we are at a point, at least in US, where information about people has been released several times over. The sheer amount of free monitoring I have received over the past 2 years alone would likely last me at least through my lifetime and I am not sure I am exaggerating much.

If that is the case: fuck it. Lets make it miserable for everyone until the pain is felt to an extent that necessitates changes.

I didn't say the crime was fine. I don't think that in either scenario it shouldn't be investigated.

Reddit failed to keep that information safe, and if it's an user's information they need to do what they can to keep it safe. They don't get to make the choice if it's someone else's information. If it's theirs, go hard, let it leak if they want.

Users should always assume that their data can and probably will be shared, sold, stolen or otherwise mishandled on socials. People already share personal and private information in both public and private subs, almost always using pseudonyms. Unless you’re doing Reddit wrong, more users wouldn’t lose much in terms of privacy.

Just because the information probably won't be damning doesn't mean that the company has no responsibility to keep that information as safe as possible.

Is there any guarantee at all that BlackCat will actually follow through on deleting their ill-gotten gains, or that those files haven't already been shared out elsewhere?

If Reddit leaks my data, Reddit should pay me, not thieves and extortionists.

You're right, there is absolutely no guarantee and I don't trust that the data would disappear, and there should be a real price to be paid to the end user for guaranteeing that trust.

But "we don't negotiate with terrorists" isn't very brave if you're giving up someone else's data.