How does this hurt fans? The way I see it, the fans get new information that they never knew existed. The fans exclusively benefit. It may hurt the company by having to get better security, but they should have done that earlier in order to prevent things like this.

And even for the company it acts as a lesser evil. At least they lost something relatively harmless as opposed to vital info and can use the experience to secure the servers so the latter doesn't happen.