It's too early to tell. They may be still sitting on the stolen data for multiple reasons: - the 1 free year of identity protection to expire - if there's a s

It's too early to tell. They may be still sitting on the stolen data for multiple reasons: - the 1 free year of identity protection to expire - if there's a surge, it will definitely be on the radar, it will be more publicized and more and more people will take defensive actions (like buying extended identity protection and/or freezing credit). As we can see, it kinda blew over. I mean, that's what I'd do if I'd be in the 'stolen data' business.