> If this information becomes public, it could be disastrous.

Isn't it even worse if it doesn't become public? It's been downloaded by an unauthorized party after all, so if they're not publishing the data, I'd wager they've found another way to profit from it. I.e. blackmail or similar.

I guess it depends on your viewpoint wherever that's better or worse.