Yep, I mention that in the "What's this all about" section. However, I don't know why anyone would want to give up their legal rights, especially to a company that has just proven that they can't keep your data secure.
Late to the party so I wondered about:
1. To confirm whether you were a victim of their "cyber security incident" you have to enter (6) digits of your SSN. Uh ... no.
2. We CAN still sign up for their one year credit-monitoring service and retain the right to legal action.
3. We should think about freezing our credit per FCC: