2.65m people?
Let's see, scaling for length of breach, bonus multiplier for SSNs.... that should be a fine of at least $50,000. Boy oh boy, that's gonna show them.
And that identify protection only lasts for a year (that's all Equifax and Experian each gave me when they were breached). So if I'm a hacker stealing SSNs, wait a year. Most of those SSNs (unlike credit card numbers) will still be valid.