Yea, CCC actually has a huge problem by being too ethical. Apparently they had cases were the data protection authority did not force companies to disclose the leak because access by CCC does not constitute access by a malicious third party; absolutely bonkers. Just because the malicious party didn't open their mouth doesn't mean they haven't accessed the data, you pigeon.