A part of their damage claim is based on the costs incurred by this so-called cyberattack. "These hacking attacks [scraping mostly JSON] materially affected OCLC’s production systems and servers, requiring around-the-clock efforts from November 2022 to March 2023 to attempt to limit service outages and maintain the production systems’ performance for customers. To respond to these ongoing attacks, OCLC spent over 1.4 million dollars on its systems’ infrastructure and devoted nearly 10,000 employee hours to the same." Also "During this time, customers threatened and likely did cancel their products and services with OCLC due to these disruptions."

Those are probably the most valid angles to push here. Mostly the invested time and money since they are actually quantifiable, as opposed to the people who maybe probably definitely canceled their service because of the disruption.