True. 2.5 million is a lot of people. And also, in the event that Equifax actually gets taken to task for the damage caused, I want every victim counted.
However, from the point of view of each individual person in the population, this news doesn’t materially affect how I should feel about and react to the situation. Human emotions are scope-insensitive, and (at least for me) outrage maxes out long before number of victims hits triple digits, let alone nine figures. Plus, I already just assumed my data was compromised. It’s not like my behavior will change now that I’m 1.4% more sure.