“datum” is the singular, but you’re right that it’s not really grammatically plural since you’d say “the data was stolen” not “the data were stolen”. I think the latter would technically also be valid; my interpretation would be that the latter is “countable” plural, so there are specific discrete datums that were stolen.