Public Citizen, which backed Elvey, issued this statement after the judge's most recent decision: "The company's offer to provide its clients with a one-year subscription to anti-spam software would do nothing to protect customers from identity theft and would be useless to those who already have anti-spam software or could obtain similar protection for free. … Ameritrade should not get off the hook for its massive security breach until it comes clean with its clients and shows it has fixed the problem."

Don't hold your breath, but at least the judge has sent a message indicating that more must be done to make amends.