This article's a week old already. The lawsuit was "moving forward" and "advancing" per articles going back into May, so that's not a great example of something happening.
This particular article wasn't contributing anything new when written, and posting it now is just re-regurgitating the same stuff that's already been out there for weeks. Their point is valid.
There also needs to be punishment harsher than a couple bad headlines and $600 worth of identity protection services. If they have personal data, it should be more expensive to have it leaked like this than to have adequate data security in place.