From what I’ve read, PII is precisely what they’ve gotten in to, and Treasury really doesn’t want to admit it. As far as their involvement with crypto exchanges, the whole thing has the aroma of IRS about it. Call me jaded, but every time government wants oversight of something involving money, my ears go up like a jackrabbit.
Well if they're putting pii online then they probably don't have knowledge to bring prosecutions if/when they do get more information from exchanges and other places.
Not to mention that leaked information is less prosecutible against for additional reasons.