Nothing, like discussed, the chances of them actually prosecuting server owners is very unlikely due to their reputation being at stake for letting the 1.4 files be obtained in the first place.
Now their source for the phili server has been obtained, it looks even worse, it's an indication that they probably do not store their data securely and there are not relevent measures in place to protect their end users personal data (including payment details - and yes I knew people that gained access to the sql database with such data stored on it). This would be a highly embarresing blow to the company, and lauching an internation law suit would bring unwanted attention to their mistakes which allowed their servers to be compromised in the first place.
Now their source for the phili server has been obtained, it looks even worse, it's an indication that they probably do not store their data securely and there are not relevent measures in place to protect their end users personal data (including payment details - and yes I knew people that gained access to the sql database with such data stored on it). This would be a highly embarresing blow to the company, and lauching an internation law suit would bring unwanted attention to their mistakes which allowed their servers to be compromised in the first place.