> time to pool the damages of all identity thefts together
You can’t pool something you haven’t measured. This is a genuine question. I had thought we’d have demonstrated liability by now.
You can’t pool something you haven’t measured. This is a genuine question. I had thought we’d have demonstrated liability by now.
Just like in an assault/homicide case, if a victim has a heart attack and dies soon after you assaulted them, you can't prove that the attack led to the heart attack. Could just be bad timing. But most courts and juries would likely find the assaulter guilty to some extent.
This isn’t how civil damages work in any jurisdiction.
> like in an assault/homicide case
Apples and oranges. If the only way we can finger Equifax is by equating their actions to violent crimes, there is no case. That is increasingly my conclusion. These leaks have little to no actual cost.
How do propose liability could be demonstrated with something like this? Do you expect hackers and fraudsters to cite their sources when they are defrauding someone?