What's the Worst Case?

Tottok says it assumes that all its customers data has been accessed. That's all of tottop's four million accounts in an unincripted form. It includes bank sort codes, names, addresses, emal addresses and telephone numbers. So it's not just the theft of personal information, which may or may not be incrypted. Possibly a kind of data kidnapping, a ransom.