Ok after reading all the comments heres what can happen You can’t sue bungie because you haven’t had your reputation damaged or been hacked or anything like that To sue you have to prove bungie not only knew but failed to do anything about it Criminal charges can be laid as it was an unauthorised access to personal information and actions taken were not of bungies guidance or guidelines for running the program Your best bet is to contact a cyber crime division of law enforcement and put forward your case as best you can It may not get the results you want but everything is on file and if your right these types always slip up eventually You just need the patience to see it through