[Toby]

I doubt that most District Attorneys would file criminal charges, but being named in a civil suit by the family is probably quite likely, if they're made aware of how the attacker obtained the personal information.