I'm not a lawyer, but don't you have to prove that you've suffered material losses to prevail in court? I'm not sure you're entitled to anything just because you've been put at risk for identity theft.
This can be another service! You pay me some bitcoin to commit ID theft. I do it, create havok all up in your business. Voila! Damage done, now go and sue.
Money to be made all around on this deal.
Seriously, though, IANAL but I think you're right, I've read a couple other statements to that effect, that you'd have a hard time suing for the _potential_ for trouble. And would a judge require you to _prove_ an ID Theft was the result of the Equifax breach or just one of the other, smaller breaches?
We're all gonna need a lifetime of credit monitoring. Equifax is only offering it for the first year, so figure out what an average lifetime's worth is gonna cost you...
We are going about this the wrong way. We don't all need credit monitoring. It's just that the type of data they had is no longer secure and shouldn't be used to tie me to a transaction.
Just because someone has my SSN and my name doesn't mean they are me.