Wouldn't it be a better crime (more profit, easier to get away with) to use the hack to manipulate a company's stock then try to sell all the person data for pennies per GB?