They are trying to settle it with the users whose accounts were compromised. I got an email from them to some data breach settlement site. They are going to pay... wait for it... a whopping $100 - $380 to each user IF you can prove any of your accounts were compromised. Most users, however, will get a credit monitoring service from them for two years free of charge. Neither option interests me.