What a blow for this company. What is the more ethical decision for a company in an ethically questionable business: shutting down the site and letting the hackers have their way, or allowing the hackers to release tons of private data?

I feel a class action law suit on its way...