Criminals don't need to be all sophisticated anyway. They just need to know how to reach one of the sophisticated criminals and pay them to extract whatever they need.

Incidentally, as a non US and non UKer, my data with the major tech firms has no protection anyway. Welcome to the club, US citizens :)