alt Hacker NewsBut who would be affected, the institutions or the actual customers whose information was leaked? Any fraudulent activity based on the leaked information cannot be directly blamed on the customers themselves and should be a problem the institutions to be stuck with and solve.
You're not looking at the full picture. Of course customers ultimately won't be responsible. But they might have to spend weeks/months/years fighting multiple systems for those accounts/charges/debts to be removed from their names. And just when you think it's solved, there's another one! Anyone who's been through this will tell you that it's very stressful and time consuming, unfortunately.