IANAL but an advantage of this lawsuit is that Dropbox will be forced to disclose in greater detail what happened, and we will be able to determine if the "1% of accounts possibly compromised" really was that low (it probably was, but given the seriousness of the bug, and their tendency to downplay this, confirmation would be good). As it stands currently, users are forced to rely on scant information released by Dropbox.