Not sure if anyone else suggested this, but people should file complaints to the CFPB about this:
https://www.consumerfinance.gov/
Not just about the hack, but the fact that their "check to see if you were affected by our shit" sites include a ToS that waives your right to participate in a class-action lawsuit.