A data privacy violation is data privacy violation. Even if it’s not the ‘right person’s’ personal data, it’s someone’s data. To brag on social media that you have someone’s personal data - as an employee who supposed to keep it confidential - is unprofessional & irresponsible.