Re: Presumably
So if bored Immigration guy realises he has enough details to change passwords and go shopping, the government entity in question is also liable?
If you can prove it was him, but how are you going to do that? Especially if he has instead sold your details, via a cut-out, to someone else on the other side of the World.