Recently a website which provides e-mail service, kind of like gmail, but a smaller Estonian version of it got breached. The hackers got access to my e-mail and therefore all the accounts I have connected with this portal. They most likely stored the passwords in plain text, since I got some threat e-mails and they included my passwords in the threat e-mail to prove they have access to it.
They claim to have some video recorded from my laptop camera, and ask for bitcoin payment to not leak it. I call it a bluff and most likely they don't have anything.
Can I demand some compensation or even sue the company for having such a bad security layer on their portal? Or should I just accept it and move on?