When was the last time you remember a company being sued into oblivion for a security breach?

The cost in the US is more like “one year of credit monitoring”.