Reminds me of the Interrail data breach [https://stateofsurveillance.org/news/eurail-data-breach-3080...]

The fediverse take on that was "customers are advised to rotate their faces and birthdays."