One of the biggest problems I see is it is really hard to attribute an instance of Identity Theft to a specific breach. So you can't (as a reporter) go out and build stories about people directly affected by the breach to build awareness of the problem. People tend to ignore (or be ignorant) of the situation unless it affects themselves or the people they have relationships with.