There are good lists of breaches but few describing what happened to the people afterwards. Credit card theft resulting in a loss being the most obvious one.
Such concrete (real) examples would help me to argue with people who say: all this non-sense about data privacy. What would anyone want to do with your data anyways?
The ultimate example is how 1940’s Germany used 1930’s Germany’s census data. In 1933 it didn’t seem so bad to tick a box with your religious affiliation …
Several Dutch officials enacted wholesale destruction of those records as the occupation became obviously imminent, which saved many, though the Jewish population of the Netherlands fell from 154,887 in 1941 to 14,346 in 1947.
The point being it's not necessarily your own government you need be worried about.
In another variant on this, surveillance records kept by the East German Ministry for State Security (Ministerium für Staatssicherheit, a/k/a the Stasi) and Soviet KGB were acquired by successor governments (unified German and post-Soviet states including Ukraine). See: <https://www.wilsoncenter.org/blog-post/unearthing-soviet-sec...>
(I'm trying without success to find a reference to the destruction of Dutch census records, though I'm pretty certain this did actually happen.)
I'm pretty sure I saw this spelled out years ago in a groups.google.com post, but the amnesiac search engines of today are not yielding it up to me.
I did find these articles:
https://jacquesmattheij.com/if-you-have-nothing-to-hide/
https://medium.com/@hansdezwart/during-world-war-ii-we-did-h...
And one of them references http://web.archive.org/web/20150812120743/https://stadsarchi... (archive link, site is no longer up).