Victims are not the DB admins. Victims are the people whose private data, or data they expect to be private, is exposed due to developer incompetence.