What are my risks when doing KYC?

What are my risks when doing KYC?

Submitting photos of my ID and video of my face along with all my personal information seems like a great way to have my identity stolen, yet millions of people have done it on multiple exchanges. What’s protecting me in a data breach?

That’s basically it for my question. So far most hacks/exploits have been from exchanges - security issues have happened but the blockchains themselves are almost never the issue (barring the occasional bug. I’ve been asked to submit KYC by a newer company and I’m not sure what’s protecting my identity besides them promising they’ll try not to let anyone steal it.