I believe the breached company partners with some firm and offers one year of identity monitoring because it is what is usually offered with the new "data breac

I believe the breached company partners with some firm and offers one year of identity monitoring because it is what is usually offered with the new "data breach" insurance available. By paying for the (opt-in) credit monitoring they are actually limiting their own liability.