You May assert compensation from the web site to the monetary destruction as they have got breached the data defense law by not providing sufficient security when processing information. Examine the rights you might have above your personal facts under the GDPR, tips on how to workout these legal rights, https://nathanlabsadvisory.com/maximize-business-trust-and-security-with-hitrust-compliance/