ALL of those effected need to :
1. Send an email to Smisek, Compton, O''Toole
2. Copy all correspondence to Scott McCartney at WSJ, Christopher Elliot at Elliot.org, Ben Mutzabaugh at USA Today , and the Conde Nast Ombudsmen department
3.Send a complaint to the DOT - they may not be able to help but need to be aware of the situation , especially if this is a major hack or lack of security
Just my 2 cents