I think people do care, its just impossible for them to express how much they care. Like I want to do something about this data breach, what else can I do apart from remove myself from facebook (there is good evidence that that wouldn't help me either)? Its a monopolistic market and they are very good at hiding the risks. People don't accept random spam and data leaks out of not caring, but because even if they care the current business models will not care about their opinion.
So what? Failure to disclose is illegal many places for good reason, and the relevant authorities are the ones who need to be doing shit about this. No one expects consumers to regulate other areas, why tech?
If Ashley Madison and Equifax walked away with barely a scratch from their catastrophic breaches, then this is almost nothing in comparison.