I'm planning on suing them in small claims court. So should every single person harmed. That _will_ force them out of business.
The funny thing is I already had a credit freeze from when the state of GA leaked our information.
But this leak involves a lot of people's private details, and it's just bad. I don't see a way that you, or any of us, could lose in the courts.