It might be worse. But I dont know how anyone can weigh destruction of one life vs ruining thousands of people's lives (or at the very least increasing the general angst among society at large).

They leaked far more than SSNs.

This also raises a real question about scale and distributed harm. If killing someone is wrong, what is stealing one ten-thousandth of a lifespan (through stress and monetary loss) from a hundred million people?