I don't really know much about this sort of thing. I assume that to the retailer that gets pwned, they get a few weeks or months of bad press then pass the cost of that breach on to future customers.
The "regular guy" in me thinks, "Meh, I'll probably ending up paying 5 cents more for light bulbs because of this. Oh well."
I feel bad for the sysadmin/security guys at these companies, probably screaming for budget and not getting it. What do you think they're doing now? Helping some high paid IR consultant restore logs from backups. Good times!