From the customer's perspective, does it matter how their data got out?

A breach of trust, perhaps