But, was anyone's personal data really on that server? If it's an anonymous emailing service I would think that just the service was disrupted.
Having more data about more people increases the risks of false positives ("Innocent Bob is a terrorist!") and false negatives ("Terrorist Ann is innocent!"); and raises the risks of faulty data being gathered, processed and entered.
So, having data about innocent people just increases costs and decreases quality.