Well we can surmise but it is difficult to pin down when identity theft & corporate hacks have become a daily event. One law firm told me, when signing up for a class action suit again one corporation, that one must be able to prove the damage (from 1 out of 100 breaches?).