it could be a class action suit that we could all potentially sign up to -- which would at least force them to look at logs to see whether your account was hacked, which would determine whether you're in the settlement. i'd want to do it for peace of mind and I'm sure there's a lot of others would too.

that would be how i would approach it, assuming what I've read in the media about the underlying issue (which I care about way more than the pics btw....). it really sucks no matter what from a web security standpoint :(

but this is also a reason why I always use random passwords for each important service so even if one service is compromised not all of them are :p