Re: But whose data was lost?
Do what we are doing and file a small claims case against them. Here in Texas you can even ask for a 6 member jury. I plan to start out asking them (hypothetically, of course) how much they would sell their unchangeable digits and other confidential information for. Then I plan on putting them in my shoes and tell them the defendants GAVE it to hackers who have likely created a database with it on some dark servers somewhere.. I expect to get the max judgment ($10k) which is almost double what I could get elsewhere. If you go the class action route, the company would go bankrupt before paying out more than $100 pp.