Hold on a minute..... assuming it is this kid (and your guess is as good as mine whether it is or not), for any real damage to be done he would either have to have sold the data already, which would require a buyer, which he would probably have had to source beforehand, or he has used the data already.
Neither of those scenarios seems likely to me, especially if he is, as expected, a script kiddie doing it for the lulz.
If he has still got the data and the only copy wasn't on the equipment seized by the cops then he will have to do something with it very shortly, which would take a great deal of nerve, as I would imagine he has been shaken up enough by the whole experience.
Of course it could be nothing to do with him (maybe he was just running a Tor exit node or something).
Either way we haven't heard the last of this yet, that's for sure.