What I want to know is how they established part of the settlement for damages caused by the breach, yet there is 0 evidence that any of the data has ever becom

What I want to know is how they established part of the settlement for damages caused by the breach, yet there is 0 evidence that any of the data has ever become public. How would someone prove they were affected, if nobody was affected?