I cannot understand how any government can allow corporations to let this continue happening. They offer up BS credit monitoring yet we the people who have our lives stolen for the sake of corporate greed and ignorance never collect one penny. The US and other governments MUST WAKE UP and immediately. Take action against companies like this. Shut them down if its warranted. Cellular companies are the worse yet get continual breaks by the FCC and FTC. Never pay a dime to customers. My boiler plate is this. If a company cannot afford to pay every person affected $1M dollars tax free, they than cannot afford to have a breach. Warnings and slap of the wrist fines to the government go nowhere. Its lather, rinse and repeat. Start shutting doors to companies our governments are labeling "too big to fail". That's hogwash.
https://www.bleepingcomputer.com/news/security/change-healthcare-lists-the-medical-data-stolen-in-ransomware-attack/