Hacker News Reader

So where/what is my compensation? (I know there is no recourse).

When no one is on the hook for secure practices, like enabling MFA on your effin data stores that contain massive amounts of customer PII, this is the result. Not even an apology, just report it and move on. woops! those gosh darned cyber criminals.

View on HN

If you go to court and ask for compensation you would likely be asked to show harm. Could you?

It really doesn’t matter. Compensation has been dispensed to customers in data breaches such as credit/ssn info, no harm proof needed. Potential for harm is enough. Breach of contract, as a customer do I have a reasonable expectation that this data is not exposed? of course I do. No one could very seriously argue it’s a zero sum.

Is there no harm, or is there harm that is hard to show in court?

A bit of both.

Most people aren't going to have their identity stolen (or insert w/e crime). Those that do will have trouble proving it was from this leak.

I've received checks over the years for various things like this. You end up having to fill out a claim form and then wait about 5 years and one day, you get this check in the mail for some tiny amount of money.

Reply on news.ycombinator.com