Last year I got a notice from a credit card company that there had been a data breach, exposing the personal information of millions of cardholders. Their compensatory action was to allow each cardholder to enroll in a credit monitoring program for free for 2 years.
The RNC and/or the contractor who exposed the personal data should be required to do no less.