I feel like a lot of it is changing the discussion. Like not everyone has the money, time and effort to be able to do a small claims thing, but there are a lot of things you can do. Teaching people to pull their credit reports, teaching them about risk assessment (I talk briefly about threat models when I do an online privacy talk at public libraries and I think it's useful to help people figure out "where do I fit into all this?") and how to get more information that they can trust.

And, for this audience especially, try to be supportive and helpful getting people to figure out how to keep their information more private in a way that works for them. Most people aren't techie and that's OK and is going to stay that way. Help them be better at the things they need to do, with good, well-sourced information, don't just holler at them because they write passwords down or don't know the different between their Apple ID and their laptop login. Encourage them to look at the structures that underlie the systems that they use every day (frex: Google is the world's largest advertising agency and that should figure in to personal decisions about how much to interact with them).

Above all, don't just bitch on the internet! I mean, sure do some of that, but that should be the beginning of your work to try to help yourself and other people deal with the situations we're in, not the end.