I haven't' checked but I am guessing that they would have a pretty comprehensive T&Cs of use document which would disclaim liability in circumstances where personal information was divulged through a third party intervention. Provided they took reasonable steps to protect the private information, I doubt there would be strong grounds to make a claim against them.
