You Could assert payment from the website for the economic injury as they've breached the data protection legislation by not giving enough security when processing data. in the case of processing depending on genuine passions or to the efficiency of a process in the public interest or workout of official https://nathanlabsadvisory.com/how-nist-800-171-compliance-consulting-in-usa-can-secure-your-business-data/