I don’t worry about private individuals nearly as much as government agencies.
The thing to remember is that private individuals work for government agencies. And with some notable exceptions, data security isn’t a big deal. The guy/gal/whatever it is who leaked 150,000,000 people’s data is perhaps an example. (I know that CitiBank isn’t government, but I bet they thought their data was pretty secure—maybe a bit more secure than say the local DMV).