First off, fuck UMG.

Secondly:

To mitigate the potential risks for those affected, UMG is offering complimentary credit monitoring and identity theft protection through Experian’s IdentityWorks for 24 months.

I hate that companies can just give people that and get away with data breaches. They have cyber insurance - make them pay up, full stop.