Name, sex and ancestry were sold on the dark web, that’s a breach of private data.

It would be a breach if the data was private, but the feature itself exposes this data. That would be like presenting a concert to hundreds of people then complaining your facial attributes were leaked in social media.