You Could claim payment from the web site for the money damage as they've breached the data security legislation by not furnishing enough security when processing data. Read about the rights you have above your own details under the GDPR, the best way to exercise these rights, and a lot https://nathanlabsadvisory.com/penetration-testing/