You could claim payment from the web site for the fiscal problems as they have got breached the information safety law by not supplying sufficient security when processing data. Examine the legal rights you've got around your individual info under the GDPR, the best way to workout these legal rights, https://nathanlabsadvisory.com/ensuring-secure-payment-processing-with-pci-dss-compliance-certification-in-the-usa/