It is quite scary how a little database leak could lead to a huge chain of robberies involving potentially millions of USD, specifically if big names & their addresses are leaked. The worst part is, governments may require businesses to store customer details but a business doesn't always have a high level database security. In fact, I'd guess most of them don't.
But in the financial sector this is very dangerous. A class of sellers of a brand of digital currency storage Trezor and Ledger, if not able to maintain the secrecy of these buyers is sad. Trezor and Ledger should monitor their resellers, if necessary there must be permission through the fulfillment of buyer's requirements guarantee security.