Any financial losses incurred as a result of the breach would have to be compensated. I don't know if making you aware passes some responsibility to you from now on. I would change your user logon id and password or threaten to close the account due to loss of trust and to maybe make the press aware.
To be sure I would consult a solicitor.