Past experience says any class action lawsuit will end up being meaningless for 99.9999% of us (like most class action lawsuits, where the lawyers get rich and the consumers get nothing). As an example, my data was compromised from the Home Depot hack several years ago. After the lawsuit/settlement, I was told I could apply for compensation up to 2-3 hours of my time spent cleaning up the mess (canceling compromised credit cards, freezing credit, etc.). I dutifully filed a claim saying I had spent 2 hours dealing with the mess, which was promptly denied because I did not provide "documentation or proof" that I had spent that amount of time. WTF, as if anyone could prove such a thing. Sure, let me just issue a subpoena to my ISP for records demonstrating how much time I was on the credit card website canceling and requesting new cards and changing my numbers on all my online bill payments...