Unfortunately, lawsuits are rare unless a user can demonstrate that the hack led to measurable harm.