Same flawed logic as in online piracy.
No one lost your data, they still have it, but someone else made a copy.
No one lost your data, they still have it, but someone else made a copy.
That emphasis is twofold: 1) they can do it again, because 2) they didn't lose anything.
The corollaries being that their incentives aren't aligned with the people whose data is leaked, the company don't need to spend on avoiding leaks because they're not harmed beyond a little (bad) PR.
The pedantism is unhelpful.