[chesterbeatdeath]

Agree.

Given the magnitude and nature of websites I've compromised, If I was someone with malicious Intent, there's basically no limit on what I could achieve/gain both on a personal level and the website's data. Obviously, I'm not that type of Individual.

This Is the back-end of a leading auto pilot website that I exploited last night. I have full raid on their systems.

Spoiler:

I originally had this type of mindset codified for me in the book "Hackers". If there's a password or protection on something, I want in. I don't really care about what's inside, it's the fact that someone is trying to tell me I can't go somewhere or do/look at something. I'm very glad to see the Hacker Ethic alive and well these days. I didn't want someone's information logged on our servers just because they viewed an ad we had running on a very popular app/website that was to be used for botvertising. I don't want their information. If they're protecting it and we get fake telemetry, so be it, but we'd be scooping up all this real data in the nets and then selling it to the highest bidder to do god know's what with.
Homie don't play  that. I take great care to safeguard my privacy and information and I could simply not be a part of selling pieces of people's identities who simply don't know better than I do. I wouldn't want my identity stolen, so why should I take someone's?
In certain circles there is always someone looking to fly a little under the radar selling their pedigree info willingly, so it is simply best to rely on these people... If you're in a position to do so.
Again: Kudos on not reaming out the users of that site for everything stored on those servers. With the sewer rats I've met in this game lately, such behavior seems to be

You've hit the nail on the head with this comment:

I wouldn't want my identity stolen, so why should I take someone's?

I could easily build an Identity from the ground up and use It for malicious purposes, but that's totally Immoral and one of the lowest acts of deceit. We can take the utmost of care to protect our privacy, but the question remains, how safe Is your data with a given entity? Very shortly, I will post an Ideal example In the Compromised forum of a huge Telco company that I've been targeting for a number of weeks and successfully compromised around 30 minutes ago. The security was extreme and very Impressive. The array and nature of the data, Is alarming to say the least.

And I'm with you that this information you've obtained has to be told to the world, so that people aren't willing to give up such sensitive information to a faceless corporation that thinks their ITSec is god's gift to the poor layman who should grovel at their feet. Like your profile says, the security is there, but for how long? Given enough time some creative youngin' or hardworking geez is going to get into whatever they want to get into, as long as they aren't stuck to one method of entry and ONLY that method.

Hackers and crackers have to act kind of like Bane; Letting the people know how truly free they aren't by exposing them to the harsh realities of, well... reality. (At least I didn't go with a Joker metaphor?)

Stay hydrated.