I'm well aware that the shareholders are very diverse and detached. All the more reason to impose a reasonable damages: $1000 per person. Let the market price that into companies that hold such vast amounts of sensitive data.