Because you have to prove damages from your data loss or web tampering.  So, you got redirected to a different site.  Maybe your credit card number got sold and bought a few dozen times until some time 2 years later, someone started charging it, so your bank cancelled it and reissued.  There&#x27;s a lot of maybes and tenuous connections.<p>Nobody would take that case.<p>There&#x27;s a problem with our privacy protections in the law.