The black market for trading in personal data has been around for decades and is not confined to just the aviation industry. What has changed in the last few years is how that unauthorised data gets released/hacked and how that unauthorised data is auctioned on the dark web to the highest bidder.
Where there is a buyer there will always be a seller.