The notion that identity theft monitoring is sufficient mitigation to a customer after a breach like this is laughable. I'm concerned as the tend becomes norma

The notion that identity theft monitoring is sufficient mitigation to a customer after a breach like this is laughable. I'm concerned as the tend becomes normalized, when someone does finally bring a challenge in court where that's one of the matters to be dealt with, the company will simply say "industry standard".