I'm not a lawyer either, but I'd imagine a class action suite since so many people are involved. Maybe you can sue for damages, breach of trust or contract. Since you are entrusting these companies with your info, you are in a contract with them. They have to be held responsible some how. Maybe there should be and FDIC type thing for this. If it happens enough, hopefully State legislatures will start coming up with something. Like I said, I'm not a lawyer, just throwing ideas out there.