True! Actually this is illegal and can be reported to the authorities because it falls under a cyber incident on someone’s personal information so it’s a misdemeanor and a exposure of personal information/ could also be filed as negligence and jail time if considered a harsh enough leak of information