Because you have to prove damages from your data loss or web tampering. So, you got redirected to a different site. Maybe your credit card number got sold and

Because you have to prove damages from your data loss or web tampering. So, you got redirected to a different site. Maybe your credit card number got sold and bought a few dozen times until some time 2 years later, someone started charging it, so your bank cancelled it and reissued. There's a lot of maybes and tenuous connections. Nobody would take that case. There's a problem with our privacy protections in the law.