A data breach that reportedly exposed the personally identifiable information of 2.9 billion people, including Social Security numbers, has called mainstream attention to the conditions that enable massive data leaks and the complexities of litigating on behalf of their victims.