It's crazy to me that data breaches don't result in bigger payouts for the people whose data has been compromised.
Discussion
Is anyone even trying to figure out the damages? I'd doubt it because that would liquidate the breached-parties potential liability. They probably like that this number is unknown, I am sure its enormous.
What? Does anyone ever got paid? I thought it is only some money to be paid to the regulators and it is then gone for some general government shanenigans.
GDPR is trying to fix that. I think minimum €20 million or 4% annual revenue whichever is greater.