You could assert payment from the website with the money hurt as they've breached the info defense law by not giving ample security when processing data. Those people corporations are obliged to acquire acceptable techniques to inform other companies (controllers) that are processing the non-public info that the data issue https://nathanlabsadvisory.com/navigating-the-2025-cybersecurity-threat-landscape/