Can anyone put this in perspective for penalties for other data breaches? Honestly I'm used to data breaches having no penalties other than maybe "we'll sign yo

Can anyone put this in perspective for penalties for other data breaches? Honestly I'm used to data breaches having no penalties other than maybe "we'll sign you up for credit monitoring" (that I don't want or need).