They would not have sued in any case.

Nobody that was affected is suing them.

There's an NGO (unrelated to the security breaches) that is demanding more info be released etc but it's telling that none of the affected parties are pursuing lawsuits.