[iontheball]

what damages have you personally been subject to that would justify a law suit?

---

If someone borrows your valuable car and then the car is stolen from the friend do you not believe you have a cause of action? A car is one thing, all your most private personal information is priceless. It is valuable property that you have entrusted in the hands of a trustee and the trustee has lost your valuable property. There is a fiduciary duty that applies. Moreover, privacy laws come into play and just the breach is actionable.

[bert]

I think your analogy is false

absent damages, real damages, I see no merit for a law suit

the fact some unknown now has the data does not mean that you personally were damaged. If they make a mortgage application or file an ammended tax return, there might be damages