We have had it already, several times over but people dont care. Once it is something big enough (like I now own your house or bank account) people will care, although big bank and government will protect us surely...
I don't think we've really had "the big one" yet, it's going to be something like several years of recorded private audio conversations from the interiors of luxury cars being dumped, or every amazon echo on the planet simultaneously playing 'fuck the police' by NWA.
Does facebook user data getting sent to a 3rd party to manipulate elections big enough? IoT devices are regularly being used to DDoS major internet services.