Negligence is not "really really hard to prove". In the US, negligence as a tort is a four-pronged test. In the case of Equifax, did they have a duty to protec

Negligence is not "really really hard to prove". In the US, negligence as a tort is a four-pronged test. In the case of Equifax, did they have a duty to protect your PII? Did they breach that duty? Was that breach the proximate cause of your PII being disclosed? Did that disclosure result in an injury?