I'm sure most people don't mind occasional outages. In this situation, however, you're paying for many services linked to a PSN account and not only are you not getting the service promised, but they're hiding the fact that your personal information has been compromised. This is a step below bait and switch. instead of a lower quality service, they're providing an unservice. Deliberately hiding knowledge of the loss of private data for this long is at the LEAST a fine.
Losses suffered don't have to be financial. The loss of security can be costly. In this day in age when identify theft can wreak havoc, having personal information floating around the internet can be difficult and expensive to monitor and defend against. The damage is the loss of a secure identity, at a minimum.
I don't have a PSN account, I'm just following this story out of interest in security practices.