Isn't the typical "penalty" a year of free credit monitoring offered to the customer? (as if that does anything...you're stuck with most Personally-Identifying-

Isn't the typical "penalty" a year of free credit monitoring offered to the customer? (as if that does anything...you're stuck with most Personally-Identifying-Information for life and now it is already in the wild...)