Hey anyone remember that settlement that they never paid out because it turned out the amount couldn't cover everyone who was affected by their breach?

Then they offered ID theft monitoring because just what we want is for them to collect more data on us.

How is this company still allowed to do business?