Without knowing how/where they store the photos, I think it’s tough to say whether they should have known better. I do wonder how the person who stole them knew about them, were they (Azalea’s pictures) the target of the hack, or were the looking for something else and happened to find these photos.