Oftentimes it's not even a hack. Many years ago the national student loan lender in Canada lost a hard drive containing seven years' loan details, leading to a class action suit.[1]

[1]: https://www.canada.ca/en/employment-social-development/progr...