for certain, I can see how some may be a tad paranoid about what happens with their personal details. And I dare-say they have every right to be concerned. But.. had this been a small scale business, who had no background in bitcoin, and no perseverance to working legitimately, do you think they would have gotten so many customers and a database as large? I doubt very much gox will be throwing the scan of my passport out of the windows for all and sundry passing by to take home and copy/defraud.

Now, i'm not saying that what has happened with gox has been in any way good business practice, but what I am confident is that without me physically  transferring my money to them - that is all they currently have, a few scanned documents with my business address. Anyone could get that just by searching the internet enough - a mugshot, bank details and address. We are all susceptible to fraud, it's not limited to the companies to whom we proffer our personal information.

add: just trying to think sensibly, i don't think panic is warranted.