Seems like a modest sum, considering the scale and blatancy of the breach. It does nothing to challenge my working theory that "lawyers are happy, as long as they get paid."
How many end users receive dosh, how much, and is it in addition to losses directly attributable to the breach?